CVE-2021-37040: Critical severity harmonyos vulnerability
There is a Parameter injection vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause privilege escalation of files after CIFS share mounting.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-37040?
CVE-2021-37040 is classified as a medium severity vulnerability due to its potential to cause privilege escalation.
How do I fix CVE-2021-37040?
To mitigate CVE-2021-37040, users should update their Huawei devices to the latest software versions provided by Huawei.
Which Huawei devices are affected by CVE-2021-37040?
CVE-2021-37040 affects Huawei devices running HarmonyOS up to version 2.0, EMUI version 11.0.0, and Magic UI version 4.0.0.
What types of attacks can exploit CVE-2021-37040?
CVE-2021-37040 can be exploited via parameter injection attacks that could lead to unauthorized file access.
Is there any public disclosure or information available regarding CVE-2021-37040?
Yes, CVE-2021-37040 has been documented in security bulletins released by Huawei for affected product versions.