Lucene search

[email protected]NVD:CVE-2021-22364

HistoryMay 27, 2021 - 1:15 p.m.

CVE-2021-22364

2021-05-2713:15:08

[email protected]

web.nvd.nist.gov

cve-2021

denial of service

huawei mate 30

parameter verification

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

Percentile

12.6%

JSON

There is a denial of service vulnerability in the versions 10.1.0.126(C00E125R5P3) of HUAWEI Mate 30 and 10.1.0.152(C00E136R7P2) of HUAWEI Mate 30 (5G) . A module does not verify certain parameters sufficiently and it leads to some exceptions. Successful exploit could cause a denial of service condition.

Affected configurations

Nvd

Node

huaweimate_30_firmwareMatch10.1.0.126\(c00e125r5p3\)

AND

huaweimate_30Match-

Node

huaweimate_30_5g_firmwareMatch10.1.0.152\(c00e136r7p2\)

AND

huaweimate_30_5gMatch-

VendorProductVersionCPE
huaweimate_30_firmware10.1.0.126(c00e125r5p3)cpe:2.3:o:huawei:mate_30_firmware:10.1.0.126\(c00e125r5p3\):*:*:*:*:*:*:*
huaweimate_30-cpe:2.3:h:huawei:mate_30:-:*:*:*:*:*:*:*
huaweimate_30_5g_firmware10.1.0.152(c00e136r7p2)cpe:2.3:o:huawei:mate_30_5g_firmware:10.1.0.152\(c00e136r7p2\):*:*:*:*:*:*:*
huaweimate_30_5g-cpe:2.3:h:huawei:mate_30_5g:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
huawei	mate_30_firmware	10.1.0.126(c00e125r5p3)	cpe:2.3:o:huawei:mate_30_firmware:10.1.0.126\(c00e125r5p3\):::::::*
huawei	mate_30	-	cpe:2.3:h:huawei:mate_30:-:::::::*
huawei	mate_30_5g_firmware	10.1.0.152(c00e136r7p2)	cpe:2.3:o:huawei:mate_30_5g_firmware:10.1.0.152\(c00e136r7p2\):::::::*
huawei	mate_30_5g	-	cpe:2.3:h:huawei:mate_30_5g:-:::::::*

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20210519-04-dos-en

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

Percentile

12.6%

JSON

Related for NVD:CVE-2021-22364

cvelist1 huawei1 prion1 cve1