CVE-2021-22440

🗓️ 13 Jul 2021 11:42:33Reported by huaweiType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 42 Views

There's a path traversal vulnerability in some Huawei products that allows access to restricted directory

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2021-22440	13 Jul 202116:19	–	circl
CNNVD	多款华为产品路径遍历漏洞	30 Jun 202100:00	–	cnnvd
Cvelist	CVE-2021-22440	13 Jul 202111:42	–	cvelist
EUVD	EUVD-2021-9586	3 Oct 202520:07	–	euvd
Huawei	Security Advisory - Path Traversal Vulnerability in Some Huawei Products	30 Jun 202100:00	–	huawei
NVD	CVE-2021-22440	13 Jul 202112:15	–	nvd
OSV	CVE-2021-22440	13 Jul 202112:15	–	osv
Prion	Path traversal	13 Jul 202112:15	–	prion
RedhatCVE	CVE-2021-22440	9 Jan 202611:21	–	redhatcve

NVD

Vulners

Node

huawei mate_20_firmwareMatch9.0.0.195(c01e195r2p1)

huawei mate_20_firmwareMatch9.1.0.139(c00e133r3p1)

AND

huawei mate_20Match-

Node

huawei mate_20_pro_firmwareMatch9.0.0.187(c432e10r1p16)

huawei mate_20_pro_firmwareMatch9.0.0.188(c185e10r2p1)

huawei mate_20_pro_firmwareMatch9.0.0.245(c10e10r2p1)

huawei mate_20_pro_firmwareMatch9.0.0.266(c432e10r1p16)

huawei mate_20_pro_firmwareMatch9.0.0.267(c636e10r2p1)

huawei mate_20_pro_firmwareMatch9.0.0.268(c635e12r1p16)

huawei mate_20_pro_firmwareMatch9.0.0.278(c185e10r2p1)

AND

huawei mate_20_proMatch-

Node

huawei hima-l29c_firmwareMatch9.0.0.105(c10e9r1p16)

huawei hima-l29c_firmwareMatch9.0.0.105(c185e9r1p16)

huawei hima-l29c_firmwareMatch9.0.0.105(c636e9r1p16)

AND

huawei hima-l29cMatch-

Node

huawei laya-al00ep_firmwareMatch9.1.0.139(c786e133r3p1)

AND

huawei laya-al00epMatch-

Node

huawei oxfords-an00a_firmwareMatch10.1.0.223(c00e210r5p1)

AND

huawei oxfords-an00aMatch-

Node

huawei tony-al00b_firmwareMatch9.1.0.257(c00e222r2p1)

AND

huawei tony-al00bMatch-

[
  {
    "product": "HUAWEI Mate 20;HUAWEI Mate 20 Pro;Hima-L29C;Laya-AL00EP;OxfordS-AN00A;Tony-AL00B",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "9.0.0.195(C01E195R2P1),9.1.0.139(C00E133R3P1)"
      },
      {
        "status": "affected",
        "version": "9.0.0.187(C432E10R1P16),9.0.0.188(C185E10R2P1),9.0.0.245(C10E10R2P1),9.0.0.266(C432E10R1P16),9.0.0.267(C636E10R2P1),9.0.0.268(C635E12R1P16),9.0.0.278(C185E10R2P1)"
      },
      {
        "status": "affected",
        "version": "9.0.0.105(C10E9R1P16),9.0.0.105(C185E9R1P16),9.0.0.105(C636E9R1P16)"
      },
      {
        "status": "affected",
        "version": "9.1.0.139(C786E133R3P1)"
      },
      {
        "status": "affected",
        "version": "10.1.0.223(C00E210R5P1)"
      },
      {
        "status": "affected",
        "version": "9.1.0.257(C00E222R2P1)"
      }
    ]
  }
]

Source	Link
huawei	www.huawei.com/en/psirt/security-advisories/huawei-sa-20210630-01-pathtraversal-en

21 Nov 2024 05:50Current

4.7Medium risk

Vulners AI Score4.7

CVSS 22.1

CVSS 3.14.6

EPSS0.00026

CWE-22