by Kastro
Paper/Archive/CVE-2021-37040

CVE-2021-37040

Huawei EMUI — There is a Parameter injection vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause privilege escal…

EPSS 0.8%CVSS 9.8
critical.is priorityof 100
41
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 56.4.564 × 2011.3No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

There is a Parameter injection vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause privilege escalation of files after CIFS share mounting.

Affected

ProductAffectedFixed inSource
EMUI11.0.0–CNA
Magic UI4.0.0–CNA
HarmonyOS2.0–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refconsumer.huawei.com/en/support/bulletin/2021/9refdevice.harmonyos.com/en/docs/security/update/security-bulletins-202109-0000001196270727