Skip to content
OpenAdvisories
Unscored CVE-2021-40055 EUVD-2021-27245GHSA-922x-wr7x-r9pf

There is a man-in-the-middle attack vulnerability during system update download in recovery mode. Successful exploitation of this vulnerabi…

Published Mar 7, 2022 · Updated Aug 4, 2024 · Assigned by huawei

Vendor: Huawei Product: EMUI Product: HarmonyOS Product: Magic UI Category: Network devices

Description

There is a man-in-the-middle attack vulnerability during system update download in recovery mode. Successful exploitation of this vulnerability may affect integrity.

Affected products

VendorProductAffectedFixed
Huawei EMUI 12.0.0, 11.0.1, 11.0.0, 10.1.1, 10.1.0, 10.0.0 —
Huawei Magic UI 4.0.0, 3.1.1, 3.1.0, 3.0.0 —
Huawei HarmonyOS 2.0 —

References