VulnerabilityModified
CVE-2021-37056
There is an Improper permission control vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may allow attempts to obtain certain device information.
MEDIUM 5.3EPSS 0.51%
Does this matter?
Lower severity and a low EPSS score (0.51%). Track it; it rarely justifies an emergency change on its own.
Description
There is an Improper permission control vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may allow attempts to obtain certain device information.
- CVSS 3.1
- 5.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
- EPSS
- 0.51% probability · 42th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-281
- Affected
- huawei/emui · huawei/magic ui
- Source
- psirt@huawei.com
References
- https://consumer.huawei.com/en/support/bulletin/2021/9/Not Applicable, Vendor Advisory
- https://consumer.huawei.com/om/support/bulletin/2021/10/Vendor Advisory
- https://consumer.huawei.com/en/support/bulletin/2021/9/Not Applicable, Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.