CVE-2021-22440 — MEDIUM (4.6)

Vulnerability Description

There is a path traversal vulnerability in some Huawei products. The vulnerability is due to that the software uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the software does not properly validate the pathname. Successful exploit could allow the attacker to access a location that is outside of the restricted directory by a crafted filename. Affected product versions include:HUAWEI Mate 20 9.0.0.195(C01E195R2P1), 9.1.0.139(C00E133R3P1);HUAWEI Mate 20 Pro 9.0.0.187(C432E10R1P16), 9.0.0.188(C185E10R2P1), 9.0.0.245(C10E10R2P1), 9.0.0.266(C432E10R1P16), 9.0.0.267(C636E10R2P1), 9.0.0.268(C635E12R1P16), 9.0.0.278(C185E10R2P1); Hima-L29C 9.0.0.105(C10E9R1P16), 9.0.0.105(C185E9R1P16), 9.0.0.105(C636E9R1P16); Laya-AL00EP 9.1.0.139(C786E133R3P1); OxfordS-AN00A 10.1.0.223(C00E210R5P1); Tony-AL00B 9.1.0.257(C00E222R2P1).

CVSS Score

4.6

MEDIUM

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

NONE

Availability

NONE

Affected Products

Vendor	Product	Versions
Huawei	Mate 20 Firmware	9.0.0.195\(c01e195r2p1\)
Huawei	Mate 20	-
Huawei	Mate 20 Pro Firmware	9.0.0.187\(c432e10r1p16\)
Huawei	Mate 20 Pro	-
Huawei	Hima-L29C Firmware	9.0.0.105\(c10e9r1p16\)
Huawei	Hima-L29C	-
Huawei	Laya-Al00Ep Firmware	9.1.0.139\(c786e133r3p1\)
Huawei	Laya-Al00Ep	-
Huawei	Oxfords-An00A Firmware	10.1.0.223\(c00e210r5p1\)
Huawei	Oxfords-An00A	-
Huawei	Tony-Al00B Firmware	9.1.0.257\(c00e222r2p1\)
Huawei	Tony-Al00B	-

Related Weaknesses (CWE)

CWE-22

References

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210630-01-pathtrVendor Advisory
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210630-01-pathtrVendor Advisory

FAQ

What is CVE-2021-22440?

CVE-2021-22440 is a vulnerability with a CVSS score of 4.6 (MEDIUM). There is a path traversal vulnerability in some Huawei products. The vulnerability is due to that the software uses external input to construct a pathname that is intended to identify a file or direct...

How severe is CVE-2021-22440?

CVE-2021-22440 has been rated MEDIUM with a CVSS base score of 4.6/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-22440?

Check the references section above for vendor advisories and patch information. Affected products include: Huawei Mate 20 Firmware, Huawei Mate 20, Huawei Mate 20 Pro Firmware, Huawei Mate 20 Pro, Huawei Hima-L29C Firmware.