PT-2021-15043 · Huawei · Harmonyos

Published 2021-08-03 · Updated 2022-05-03 · CVE-2021-22420

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: HarmonyOS (affected versions not specified)

Description: A component of the HarmonyOS has an issue that allows local attackers to exploit and cause the underlying trust of the application trustlist mechanism to be missing. This could potentially lead to unauthorized control of system or configuration settings.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exposure of Resource to Wrong Sphere

Weakness Enumeration

CWE-668

Related Identifiers

CVE-2021-22420

Affected Products

Harmonyos

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2021-22420 · Security Note
• https://osv.dev/vulnerability/CVE-2021-22420 · Vendor Advisory
• https://device.harmonyos.com/cn/docs/security/update/oem_security_update_phone_202106-0000001165452077 · Vendor Advisory