CVE-2021-40055: High severity emui 5.0 vulnerability

Published Mar 7, 2022

Updated

There is a man-in-the-middle attack vulnerability during system update download in recovery mode. Successful exploitation of this vulnerability may affect integrity.

Affected Software

11 affected components

Huawei Emui=10.0.0

Huawei Emui=10.1.0

Huawei Emui=10.1.1

Huawei Emui=11.0.0

Huawei Emui=11.0.1

Huawei Emui=12.0.0

Huawei Harmonyos=2.0

Huawei Magic Ui=3.0.0

Huawei Magic Ui=3.1.0

Huawei Magic Ui=3.1.1

Huawei Magic Ui=4.0.0

Event History

Mar 7, 2022

CVE Published

via MITRE·01:50 PM

Data Sourced

via MITRE·01:50 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2021-40055?

CVE-2021-40055 is classified as a high severity vulnerability due to its potential for man-in-the-middle attacks during system updates.

How do I fix CVE-2021-40055?

To fix CVE-2021-40055, ensure that you update your Huawei EMUI, HarmonyOS, or Magic UI device to the latest security patches provided by Huawei.

Which devices are affected by CVE-2021-40055?

CVE-2021-40055 affects various Huawei devices running EMUI versions 10.0.0 to 12.0.1 and HarmonyOS version 2.0.

What types of attacks can exploit CVE-2021-40055?

CVE-2021-40055 can be exploited through man-in-the-middle attacks that compromise the integrity of system update downloads in recovery mode.

Is there any workaround for CVE-2021-40055?

There is no official workaround for CVE-2021-40055; users are advised to apply the latest updates to mitigate the vulnerability.