SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2021-22346

There is an Improper Permission Management Vulnerability in Huawei Smartphone.

MEDIUM 5.3EPSS 0.53%

Does this matter?

Lower severity and a low EPSS score (0.53%). Track it; it rarely justifies an emergency change on its own.

Description

There is an Improper Permission Management Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may lead to the disclosure of user habits.

CVSS 3.1
5.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
EPSS
0.53% probability · 43th percentile
CISA KEV
Not listed
Weakness
CWE-276
Affected
huawei/emui · huawei/magic ui
Source
psirt@huawei.com

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.