Lucene search

K
nvd[email protected]NVD:CVE-2021-22351
HistoryJun 30, 2021 - 9:15 p.m.

CVE-2021-22351

2021-06-3021:15:09
web.nvd.nist.gov
3
credentials management errors
huawei smartphone
vulnerability
permissions
system exceptions

CVSS2

5.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:P/A:P

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

EPSS

0.001

Percentile

35.0%

There is a Credentials Management Errors Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may induce users to grant permissions on modifying items in the configuration table,causing system exceptions.

Affected configurations

Nvd
Node
huaweiemuiMatch10.1.1
OR
huaweiemuiMatch11.0.0
OR
huaweiemuiMatch11.0.1
OR
huaweimagic_uiMatch3.1.1
OR
huaweimagic_uiMatch4.0.0
VendorProductVersionCPE
huaweiemui10.1.1cpe:2.3:o:huawei:emui:10.1.1:*:*:*:*:*:*:*
huaweiemui11.0.0cpe:2.3:o:huawei:emui:11.0.0:*:*:*:*:*:*:*
huaweiemui11.0.1cpe:2.3:o:huawei:emui:11.0.1:*:*:*:*:*:*:*
huaweimagic_ui3.1.1cpe:2.3:o:huawei:magic_ui:3.1.1:*:*:*:*:*:*:*
huaweimagic_ui4.0.0cpe:2.3:o:huawei:magic_ui:4.0.0:*:*:*:*:*:*:*

CVSS2

5.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:P/A:P

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

EPSS

0.001

Percentile

35.0%

Related for NVD:CVE-2021-22351