CVE Vulnerabilities

CVE-2021-22442

Improper Validation of Integrity Check Value

Published: Aug 02, 2021 | Modified: Dec 09, 2021
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:N/I:N/A:P
RedHat/V2
RedHat/V3
Ubuntu

There is an Improper Validation of Integrity Check Value Vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause the system to reset.

Weakness

The product does not validate or incorrectly validates the integrity check values or “checksums” of a message. This may prevent it from detecting if the data has been modified or corrupted in transmission.

Affected Software

Name Vendor Start Version End Version
Emui Huawei 9.1.0 (including) 9.1.0 (including)
Emui Huawei 9.1.1 (including) 9.1.1 (including)
Emui Huawei 10.0.0 (including) 10.0.0 (including)
Emui Huawei 10.1.0 (including) 10.1.0 (including)
Emui Huawei 10.1.1 (including) 10.1.1 (including)
Emui Huawei 11.0.0 (including) 11.0.0 (including)
Magic_ui Huawei 2.1.1 (including) 2.1.1 (including)
Magic_ui Huawei 3.0.0 (including) 3.0.0 (including)
Magic_ui Huawei 3.1.0 (including) 3.1.0 (including)
Magic_ui Huawei 3.1.1 (including) 3.1.1 (including)
Magic_ui Huawei 4.0.0 (including) 4.0.0 (including)

Potential Mitigations

References