PT-2021-5173 · Huawei · Huawei Smartphone

Published 2021-09-01 · Updated 2022-07-12 · CVE-2021-37038

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Huawei Smartphone (affected versions not specified)

Description The issue is related to an improper access control vulnerability in the Huawei Smartphone's operating system, allowing a remote attacker to bypass security features and gain unauthorized access to protected information. This may affect the confidentiality of services.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

BDU:2021-05973

CVE-2021-37038

Affected Products

Huawei Smartphone

References · 5

• https://consumer.huawei.com/en/support/bulletin/2021/9 · Vendor Advisory
• https://bdu.fstec.ru/vul/2021-05973 · Security Note
• https://osv.dev/vulnerability/CVE-2021-37038 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-37038 · Security Note
• https://t.me/cibsecurity/33464 · Telegram Post