PT-2021-15027 · Huawei · Huawei Smartphone

Published 2021-10-28 · Updated 2021-11-02 · CVE-2021-22403

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Huawei Smartphone (affected versions not specified)

Description: The issue concerns a vulnerability that allows for the hijacking of unverified providers in Huawei Smartphones. Successful exploitation may enable attackers to hijack the device and forge user interfaces to trick users into executing malicious commands.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2021-22403

Affected Products

Huawei Smartphone

References · 4

• https://osv.dev/vulnerability/CVE-2021-22403 · Vendor Advisory
• https://consumer.huawei.com/en/support/bulletin/2021/7 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-22403 · Security Note
• https://t.me/cibsecurity/31351 · Telegram Post