SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2021-22308

There is a Business Logic Errors vulnerability in Huawei Smartphone.

LOW 3.3EPSS 0.17%

Does this matter?

Lower severity and a low EPSS score (0.17%). Track it; it rarely justifies an emergency change on its own.

Description

There is a Business Logic Errors vulnerability in Huawei Smartphone. The malicious apps installed on the device can keep taking screenshots in the background. This issue does not cause system errors, but may cause personal information leakage.

CVSS 3.1
3.3 LOWCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
EPSS
0.17% probability · 7th percentile
CISA KEV
Not listed
Affected
huawei/emui · huawei/magic ui
Source
psirt@huawei.com

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.