CVE Vulnerabilities

CVE-2021-40055

Published: Mar 10, 2022 | Modified: Mar 14, 2022
CVSS 3.x
5.9
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS 2.x
7.1 HIGH
AV:N/AC:M/Au:N/C:N/I:C/A:N
RedHat/V2
RedHat/V3
Ubuntu

There is a man-in-the-middle attack vulnerability during system update download in recovery mode. Successful exploitation of this vulnerability may affect integrity.

Affected Software

Name Vendor Start Version End Version
Emui Huawei 10.0.0 (including) 10.0.0 (including)
Emui Huawei 10.1.0 (including) 10.1.0 (including)
Emui Huawei 10.1.1 (including) 10.1.1 (including)
Emui Huawei 11.0.0 (including) 11.0.0 (including)
Emui Huawei 11.0.1 (including) 11.0.1 (including)
Emui Huawei 12.0.0 (including) 12.0.0 (including)
Harmonyos Huawei 2.0 (including) 2.0 (including)
Magic_ui Huawei 3.0.0 (including) 3.0.0 (including)
Magic_ui Huawei 3.1.0 (including) 3.1.0 (including)
Magic_ui Huawei 3.1.1 (including) 3.1.1 (including)
Magic_ui Huawei 4.0.0 (including) 4.0.0 (including)

References