by Kastro
Paper/Archive/CVE-2021-37084

CVE-2021-37084

Huawei HarmonyOS — There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to malicio…

EPSS 0.8%CVSS 9.8
critical.is priorityof 100
41
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 55.5.555 × 2011.1No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to malicious invoking other functions of the Smart Assistant through text messages.

Affected

ProductAffectedFixed inSource
HarmonyOS2.0–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refdevice.harmonyos.com/en/docs/security/update/security-bulletins-202109-0000001196270727