Lucene search

HuaweiCVE-2021-40040

HistoryAug 10, 2022 - 8:15 p.m.

CVE-2021-40040

2022-08-1020:15:22

huawei

web.nvd.nist.gov

cve-2021-40040

vulnerability

hw_keymaster

data write

confidentiality

nvd

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.002

Percentile

52.5%

JSON

Vulnerability of writing data to an arbitrary address in the HW_KEYMASTER module. Successful exploitation of this vulnerability may affect confidentiality.

Affected configurations

Nvd

Vulners

Node

huaweiemuiMatch10.0.0

huaweiemuiMatch10.1.0

huaweiemuiMatch10.1.1

huaweiemuiMatch11.0.0

huaweiharmonyosMatch2.0

huaweimagic_uiMatch3.0.0

huaweimagic_uiMatch3.1.0

huaweimagic_uiMatch3.1.1

huaweimagic_uiMatch4.0.0

VendorProductVersionCPE
huaweiemui10.0.0cpe:2.3:o:huawei:emui:10.0.0:*:*:*:*:*:*:*
huaweiemui10.1.0cpe:2.3:o:huawei:emui:10.1.0:*:*:*:*:*:*:*
huaweiemui10.1.1cpe:2.3:o:huawei:emui:10.1.1:*:*:*:*:*:*:*
huaweiemui11.0.0cpe:2.3:o:huawei:emui:11.0.0:*:*:*:*:*:*:*
huaweiharmonyos2.0cpe:2.3:o:huawei:harmonyos:2.0:*:*:*:*:*:*:*
huaweimagic_ui3.0.0cpe:2.3:o:huawei:magic_ui:3.0.0:*:*:*:*:*:*:*
huaweimagic_ui3.1.0cpe:2.3:o:huawei:magic_ui:3.1.0:*:*:*:*:*:*:*
huaweimagic_ui3.1.1cpe:2.3:o:huawei:magic_ui:3.1.1:*:*:*:*:*:*:*
huaweimagic_ui4.0.0cpe:2.3:o:huawei:magic_ui:4.0.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
huawei	emui	10.0.0	cpe:2.3:o:huawei:emui:10.0.0:::::::*
huawei	emui	10.1.0	cpe:2.3:o:huawei:emui:10.1.0:::::::*
huawei	emui	10.1.1	cpe:2.3:o:huawei:emui:10.1.1:::::::*
huawei	emui	11.0.0	cpe:2.3:o:huawei:emui:11.0.0:::::::*
huawei	harmonyos	2.0	cpe:2.3:o:huawei:harmonyos:2.0:::::::*
huawei	magic_ui	3.0.0	cpe:2.3:o:huawei:magic_ui:3.0.0:::::::*
huawei	magic_ui	3.1.0	cpe:2.3:o:huawei:magic_ui:3.1.0:::::::*
huawei	magic_ui	3.1.1	cpe:2.3:o:huawei:magic_ui:3.1.1:::::::*
huawei	magic_ui	4.0.0	cpe:2.3:o:huawei:magic_ui:4.0.0:::::::*

CNA Affected

[
  {
    "product": "HarmonyOS;EMUI;Magic UI",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "HarmonyOS 2.0"
      },
      {
        "status": "affected",
        "version": "EMUI 11.0.0,EMUI 10.1.1,EMUI 10.1.0,EMUI 10.0.0"
      },
      {
        "status": "affected",
        "version": "Magic UI 4.0.0,Magic UI 3.1.1,Magic UI 3.1.0,Magic UI 3.0.0"
      }
    ]
  }
]

References

consumer.huawei.com/en/support/bulletin/2022/8/

device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202209-0000001392278845

Social References

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.002

Percentile

52.5%

JSON

Related for CVE-2021-40040