Lucene search

HuaweiCVE-2021-36995

HistoryOct 28, 2021 - 1:15 p.m.

CVE-2021-36995

2021-10-2813:15:10

huawei

web.nvd.nist.gov

huawei

smartphone

unauthorized file access

vulnerability

exploitation

tampering

backups

cve-2021-36995

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS

0.001

Percentile

36.2%

JSON

There is an Unauthorized file access vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability by modifying soft links may tamper with the files restored from backups.

Affected configurations

Nvd

Vulners

Node

huaweiemuiMatch10.1.1

huaweiemuiMatch11.0.0

huaweimagic_uiMatch3.1.1

huaweimagic_uiMatch4.0.0

VendorProductVersionCPE
huaweiemui10.1.1cpe:2.3:o:huawei:emui:10.1.1:*:*:*:*:*:*:*
huaweiemui11.0.0cpe:2.3:o:huawei:emui:11.0.0:*:*:*:*:*:*:*
huaweimagic_ui3.1.1cpe:2.3:o:huawei:magic_ui:3.1.1:*:*:*:*:*:*:*
huaweimagic_ui4.0.0cpe:2.3:o:huawei:magic_ui:4.0.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
huawei	emui	10.1.1	cpe:2.3:o:huawei:emui:10.1.1:::::::*
huawei	emui	11.0.0	cpe:2.3:o:huawei:emui:11.0.0:::::::*
huawei	magic_ui	3.1.1	cpe:2.3:o:huawei:magic_ui:3.1.1:::::::*
huawei	magic_ui	4.0.0	cpe:2.3:o:huawei:magic_ui:4.0.0:::::::*

CNA Affected

[
  {
    "product": "EMUI",
    "vendor": "Huawei",
    "versions": [
      {
        "status": "affected",
        "version": "11.0.0"
      },
      {
        "status": "affected",
        "version": "10.1.1"
      }
    ]
  },
  {
    "product": "Magic UI",
    "vendor": "Huawei",
    "versions": [
      {
        "status": "affected",
        "version": "4.0.0"
      },
      {
        "status": "affected",
        "version": "3.1.1"
      }
    ]
  }
]

References

consumer.huawei.com/en/support/bulletin/2021/7/

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS

0.001

Percentile

36.2%

JSON

Related for CVE-2021-36995