CVE-2021-22440

🗓️ 13 Jul 2021 12:15:09Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 14 Views

There is a path traversal vulnerability in some Huawei products. The vulnerability allows an attacker to access a location outside of the restricted directory by using crafted filenames

Reporter	Title	Published	Views	Family All 9
Circl	CVE-2021-22440	13 Jul 202116:19	–	circl
CNNVD	多款华为产品路径遍历漏洞	30 Jun 202100:00	–	cnnvd
CVE	CVE-2021-22440	13 Jul 202111:42	–	cve
Cvelist	CVE-2021-22440	13 Jul 202111:42	–	cvelist
EUVD	EUVD-2021-9586	3 Oct 202520:07	–	euvd
Huawei	Security Advisory - Path Traversal Vulnerability in Some Huawei Products	30 Jun 202100:00	–	huawei
OSV	CVE-2021-22440	13 Jul 202112:15	–	osv
Prion	Path traversal	13 Jul 202112:15	–	prion
RedhatCVE	CVE-2021-22440	9 Jan 202611:21	–	redhatcve

NVD

Node

huawei mate_20_firmwareMatch9.0.0.195(c01e195r2p1)

OR

huawei mate_20_firmwareMatch9.1.0.139(c00e133r3p1)

AND

huawei mate_20Match-

Node

huawei mate_20_pro_firmwareMatch9.0.0.187(c432e10r1p16)

OR

huawei mate_20_pro_firmwareMatch9.0.0.188(c185e10r2p1)

OR

huawei mate_20_pro_firmwareMatch9.0.0.245(c10e10r2p1)

OR

huawei mate_20_pro_firmwareMatch9.0.0.266(c432e10r1p16)

OR

huawei mate_20_pro_firmwareMatch9.0.0.267(c636e10r2p1)

OR

huawei mate_20_pro_firmwareMatch9.0.0.268(c635e12r1p16)

OR

huawei mate_20_pro_firmwareMatch9.0.0.278(c185e10r2p1)

AND

huawei mate_20_proMatch-

Node

huawei hima-l29c_firmwareMatch9.0.0.105(c10e9r1p16)

OR

huawei hima-l29c_firmwareMatch9.0.0.105(c185e9r1p16)

OR

huawei hima-l29c_firmwareMatch9.0.0.105(c636e9r1p16)

AND

huawei hima-l29cMatch-

Node

huawei laya-al00ep_firmwareMatch9.1.0.139(c786e133r3p1)

AND

huawei laya-al00epMatch-

Node

huawei oxfords-an00a_firmwareMatch10.1.0.223(c00e210r5p1)

AND

huawei oxfords-an00aMatch-

Node

huawei tony-al00b_firmwareMatch9.1.0.257(c00e222r2p1)

AND

huawei tony-al00bMatch-

Source	Link
huawei	www.huawei.com/en/psirt/security-advisories/huawei-sa-20210630-01-pathtraversal-en

17 Jun 2026 03:37Current

CVSS 22.1

CVSS 3.14.6

EPSS0.00209

path traversal vulnerability huawei products external input crafted filename parent directory restricted directory