medium5.9
CVE-2021-40055
There is a man-in-the-middle attack vulnerability during system update download in recovery mode.
Impact
There is a man-in-the-middle attack vulnerability during system update download in recovery mode. Successful exploitation of this vulnerability may affect integrity.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Huawei | Emui | Versions 10.0.0, 10.1.0, 10.1.1, 11.0.0, 11.0.1, 12.0.0 |
| Huawei | Harmonyos | Version 2.0 |
| Huawei | Magic Ui | Versions 3.0.0, 3.1.0, 3.1.1, 4.0.0 |
References
- NVD record
- CVE.org record
- https://consumer.huawei.com/en/support/bulletin/2022/3/
- https://device.harmonyos.com/cn/docs/security/update/security-bulletins-phones-202203-0000001257385193
- https://consumer.huawei.com/en/support/bulletin/2022/3/
- https://device.harmonyos.com/cn/docs/security/update/security-bulletins-phones-202203-0000001257385193