Lucene search

HuaweiCVE-2021-22364

HistoryMay 27, 2021 - 1:15 p.m.

CVE-2021-22364

2021-05-2713:15:08

huawei

web.nvd.nist.gov

cve-2021-22364

denial of service

vulnerability

huawei mate 30

huawei mate 30 (5g)

nvd

exploit

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

5.4

Confidence

High

EPSS

Percentile

12.6%

JSON

There is a denial of service vulnerability in the versions 10.1.0.126(C00E125R5P3) of HUAWEI Mate 30 and 10.1.0.152(C00E136R7P2) of HUAWEI Mate 30 (5G) . A module does not verify certain parameters sufficiently and it leads to some exceptions. Successful exploit could cause a denial of service condition.

Affected configurations

Nvd

Vulners

Node

huaweimate_30_firmwareMatch10.1.0.126\(c00e125r5p3\)

AND

huaweimate_30Match-

Node

huaweimate_30_5g_firmwareMatch10.1.0.152\(c00e136r7p2\)

AND

huaweimate_30_5gMatch-

VendorProductVersionCPE
huaweimate_30_firmware10.1.0.126(c00e125r5p3)cpe:2.3:o:huawei:mate_30_firmware:10.1.0.126\(c00e125r5p3\):*:*:*:*:*:*:*
huaweimate_30-cpe:2.3:h:huawei:mate_30:-:*:*:*:*:*:*:*
huaweimate_30_5g_firmware10.1.0.152(c00e136r7p2)cpe:2.3:o:huawei:mate_30_5g_firmware:10.1.0.152\(c00e136r7p2\):*:*:*:*:*:*:*
huaweimate_30_5g-cpe:2.3:h:huawei:mate_30_5g:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
huawei	mate_30_firmware	10.1.0.126(c00e125r5p3)	cpe:2.3:o:huawei:mate_30_firmware:10.1.0.126\(c00e125r5p3\):::::::*
huawei	mate_30	-	cpe:2.3:h:huawei:mate_30:-:::::::*
huawei	mate_30_5g_firmware	10.1.0.152(c00e136r7p2)	cpe:2.3:o:huawei:mate_30_5g_firmware:10.1.0.152\(c00e136r7p2\):::::::*
huawei	mate_30_5g	-	cpe:2.3:h:huawei:mate_30_5g:-:::::::*

CNA Affected

[
  {
    "product": "HUAWEI Mate 30;HUAWEI Mate 30 (5G)",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "10.1.0.126(C00E125R5P3)"
      },
      {
        "status": "affected",
        "version": "10.1.0.152(C00E136R7P2)"
      }
    ]
  }
]

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20210519-04-dos-en

Social References

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

5.4

Confidence

High

EPSS

Percentile

12.6%

JSON

Related for CVE-2021-22364