CVE Vulnerabilities

CVE-2021-22473

Improper Authentication

Published: Oct 28, 2021 | Modified: Nov 02, 2021
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

There is an Authentication vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.

Weakness

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

Affected Software

Name Vendor Start Version End Version
Emui Huawei 9.1.0 (including) 9.1.0 (including)
Emui Huawei 9.1.1 (including) 9.1.1 (including)
Emui Huawei 10.0.0 (including) 10.0.0 (including)
Emui Huawei 10.1.0 (including) 10.1.0 (including)
Emui Huawei 10.1.1 (including) 10.1.1 (including)
Emui Huawei 11.0.0 (including) 11.0.0 (including)
Magic_ui Huawei 2.1.1 (including) 2.1.1 (including)
Magic_ui Huawei 3.0.0 (including) 3.0.0 (including)
Magic_ui Huawei 3.1.0 (including) 3.1.0 (including)
Magic_ui Huawei 3.1.1 (including) 3.1.1 (including)
Magic_ui Huawei 4.0.0 (including) 4.0.0 (including)

Potential Mitigations

References