by Kastro
Paper/Archive/CVE-2021-22403

CVE-2021-22403

Huawei EMUI — There is a vulnerability of hijacking unverified providers in Huawei Smartphone.Successful exploitation of this vulnerability may allow a…

EPSS 0.9%CVSS 9.8
critical.is priorityof 100
41
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 60.2.602 × 2012.0No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

There is a vulnerability of hijacking unverified providers in Huawei Smartphone.Successful exploitation of this vulnerability may allow attackers to hijack the device and forge UIs to induce users to execute malicious commands.

Affected

ProductAffectedFixed inSource
EMUI11.0.0–CNA
EMUI10.1.1–CNA
EMUI10.1.0–CNA
EMUI10.0.0–CNA
EMUI9.1.1–CNA
EMUI9.1.0–CNA
Magic UI4.0.0–CNA
Magic UI3.1.1–CNA
Magic UI3.1.0–CNA
Magic UI3.0.0–CNA
Magic UI2.1.1–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refconsumer.huawei.com/en/support/bulletin/2021/7