critical9.8
CVE-2021-37040
There is a Parameter injection vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause privilege escalation of files after C…
Impact
There is a Parameter injection vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause privilege escalation of files after CIFS share mounting.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Huawei | Harmonyos | before 2.0 |
| Huawei | Emui | Version 11.0.0 |
| Huawei | Magic Ui | Version 4.0.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://consumer.huawei.com/en/support/bulletin/2021/9/
- https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-0000001196270727
- https://consumer.huawei.com/en/support/bulletin/2021/9/
- https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-0000001196270727