Lucene search

K
cve[email protected]CVE-2021-22398
HistoryAug 02, 2021 - 5:15 p.m.

CVE-2021-22398

2021-08-0217:15:14
CWE-863
web.nvd.nist.gov
25
4
cve-2021-22398
logic error
vulnerability
smartphones
digital balance
bypass
security issue

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

4.6 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

4.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.3%

There is a logic error vulnerability in several smartphones. The software does not properly restrict certain operation when the Digital Balance function is on. Successful exploit could allow the attacker to bypass the Digital Balance limit after a series of operations. Affected product versions include: Hulk-AL00C 9.1.1.201(C00E201R8P1);Jennifer-AN00C 10.1.1.171(C00E170R6P3);Jenny-AL10B 10.1.0.228(C00E220R5P1) and OxfordPL-AN10B 10.1.0.116(C00E110R2P1).

Affected configurations

NVD
Node
huaweihulk-al00c_firmwareMatch9.1.1.201\(c00e201r8p1\)
AND
huaweihulk-al00cMatch-
Node
huaweijennifer-an00c_firmwareMatch10.1.1.171\(c00e170r6p3\)
AND
huaweijennifer-an00cMatch-
Node
huaweijenny-al10b_firmwareMatch10.1.0.228\(c00e220r5p1\)
AND
huaweijenny-al10bMatch-
Node
huaweioxfordpl-an10b_firmwareMatch10.1.0.116\(c00e110r2p1\)
AND
huaweioxfordpl-an10bMatch-

CNA Affected

[
  {
    "product": "Hulk-AL00C;Jennifer-AN00C;Jenny-AL10B;OxfordPL-AN10B",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "9.1.1.201(C00E201R8P1)"
      },
      {
        "status": "affected",
        "version": "10.1.1.171(C00E170R6P3)"
      },
      {
        "status": "affected",
        "version": "10.1.0.228(C00E220R5P1)"
      },
      {
        "status": "affected",
        "version": "10.1.0.116(C00E110R2P1)"
      }
    ]
  }
]

Social References

More

2.1 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:L/Au:N/C:N/I:P/A:N

4.6 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

4.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

23.3%

Related for CVE-2021-22398