PT-2022-11108 · Unknown · Ip Phone Manager

Published 2022-01-03 · Updated 2022-01-13 · CVE-2021-39982

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Phone Manager application (affected versions not specified)

Description The issue is related to Improper Privilege Management, which can be exploited to read and write arbitrary files by tampering with Phone Manager notifications.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2021-39982

Affected Products

Ip Phone Manager

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2021-39982 · Security Note
• https://osv.dev/vulnerability/CVE-2021-39982 · Vendor Advisory
• https://device.harmonyos.com/en/docs/security/update/security-bulletins-202110-0000001162998526 · Vendor Advisory
• https://t.me/cvenotify/25440 · Telegram Post