Unscored CVE-2021-37040 EUVD-2021-23616GHSA-xpw4-2478-wj8x

There is a Parameter injection vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause privilege escalat…

Published Dec 8, 2021 · Updated Aug 4, 2024 · Assigned by huawei

Vendor: Huawei Product: EMUI Product: HarmonyOS Product: Magic UI Category: Network devices

Description

There is a Parameter injection vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause privilege escalation of files after CIFS share mounting.

Affected products

Vendor	Product	Affected	Fixed
Huawei	EMUI	11.0.0	—
Huawei	Magic UI	4.0.0	—
Huawei	HarmonyOS	2.0	—

References

https://consumer.huawei.com/en/support/bulletin/2021/9/
https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-0000001196270727