2024-12-08 03:06:42 +00:00

162 lines
5.2 KiB
JSON

{
"id": "CVE-2021-22333",
"sourceIdentifier": "psirt@huawei.com",
"published": "2021-06-03T20:15:08.433",
"lastModified": "2024-11-21T05:49:55.827",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "There is an Improper Validation of Array Index vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause code to execute, thus obtaining system permissions."
},
{
"lang": "es",
"value": "Se presenta una vulnerabilidad de Comprobaci\u00f3n Inapropiada del \u00cdndice de la Matriz en el Smartphone de Huawei. Una explotaci\u00f3n con \u00e9xito de esta vulnerabilidad puede causar una ejecuci\u00f3n de c\u00f3digo, obteniendo as\u00ed permisos del sistema"
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"baseScore": 9.8,
"baseSeverity": "CRITICAL",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 3.9,
"impactScore": 5.9
}
],
"cvssMetricV2": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"baseScore": 10.0,
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "NONE",
"confidentialityImpact": "COMPLETE",
"integrityImpact": "COMPLETE",
"availabilityImpact": "COMPLETE"
},
"baseSeverity": "HIGH",
"exploitabilityScore": 10.0,
"impactScore": 10.0,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-129"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:emui:9.1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "940801A5-523C-40D6-BB43-25BC78ADDE61"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:emui:9.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "8E6D0F53-9E85-4877-B558-4F5FB1F865D3"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:emui:10.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "504F2E73-FFD0-4589-8644-FE77656BB28D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:emui:10.1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "66AC7F91-917C-40A6-9983-A339EFB091F1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:emui:10.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "A7FF0AD1-22C2-423B-822A-E6496CEDAB02"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:emui:11.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "0B701EC6-8208-4D22-95A6-B07D471A8A8B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:magic_ui:2.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "49E5FFC0-53B4-4A34-8A23-BC70AA565703"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:magic_ui:3.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "8A7A4346-1757-48F9-827C-13EABC357302"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:magic_ui:3.1.0:*:*:*:*:*:*:*",
"matchCriteriaId": "EFAE846A-00EA-417F-B66F-1F5396BB6139"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:magic_ui:3.1.1:*:*:*:*:*:*:*",
"matchCriteriaId": "B655712B-E86C-4BD2-8A99-AEA382C520E7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:o:huawei:magic_ui:4.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "F6066FAB-23F5-4CB2-B89E-B00F8835AC39"
}
]
}
]
}
],
"references": [
{
"url": "https://consumer.huawei.com/en/support/bulletin/2021/4/",
"source": "psirt@huawei.com",
"tags": [
"Vendor Advisory"
]
},
{
"url": "https://consumer.huawei.com/en/support/bulletin/2021/4/",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
}
]
}