First published: Tue Jul 13 2021(Updated: )
The Bluetooth function of some Huawei smartphones has a DoS vulnerability. Attackers can install third-party apps to send specific broadcasts, causing the Bluetooth module to crash. This vulnerability is successfully exploited to cause the Bluetooth function to become abnormal. Affected product versions include: HUAWEI P30 10.0.0.195(C432E22R2P5), 10.0.0.200(C00E85R2P11), 10.0.0.200(C461E6R3P1), 10.0.0.201(C10E7R5P1), 10.0.0.201(C185E4R7P1), 10.0.0.206(C605E19R1P3), 10.0.0.209(C636E6R3P4), 10.0.0.210(C635E3R2P4), and versions earlier than 10.1.0.165(C01E165R2P11).
Credit: psirt@huawei.com
Affected Software | Affected Version | How to fix |
---|---|---|
Huawei P30 Firmware | =10.0.0.195\(c432e22r2p5\) | |
Huawei P30 Firmware | =10.0.0.200\(c00e85r2p11\) | |
Huawei P30 Firmware | =10.0.0.200\(c461e6r3p1\) | |
Huawei P30 Firmware | =10.0.0.201\(c10e7r5p1\) | |
Huawei P30 Firmware | =10.0.0.201\(c185e4r7p1\) | |
Huawei P30 Firmware | =10.0.0.206\(c605e19r1p3\) | |
Huawei P30 Firmware | =10.0.0.209\(c636e6r3p4\) | |
Huawei P30 Firmware | =10.0.0.210\(c635e3r2p4\) | |
HUAWEI P30 | ||
Huawei P30 Firmware | <10.1.0.165\(c01e165r2p11\) |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2021-22399 is a DoS vulnerability in the Bluetooth function of some Huawei smartphones.
Attackers can exploit CVE-2021-22399 by installing third-party apps to send specific broadcasts, causing the Bluetooth module to crash.
Huawei P30 smartphones with firmware versions 10.0.0.195(c432e22r2p5), 10.0.0.200(c00e85r2p11), 10.0.0.200(c461e6r3p1), 10.0.0.201(c10e7r5p1), 10.0.0.201(c185e4r7p1), 10.0.0.206(c605e19r1p3), 10.0.0.209(c636e6r3p4), or 10.0.0.210(c635e3r2p4) are affected.
No, the HUAWEI P30 is not affected by CVE-2021-22399.
CVE-2021-22399 has a severity score of 5.5 (medium severity).