CVE-2021-36991

EUVD-2021-23567
There is an Unauthorized file access vulnerability in Huawei Smartphone due to unstandardized path input.Successful exploitation of this vulnerability by creating malicious file paths can cause unauthorized file access.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 35%
Affected Products (NVD)
VendorProductVersion
huaweiemui
10.1.1
huaweiemui
11.0.0
huaweimagic_ui
3.1.1
huaweimagic_ui
4.0.0
𝑥
= Vulnerable software versions
References
https://consumer.huawei.com/en/support/bulletin/2021/7/
https://consumer.huawei.com/en/support/bulletin/2021/7/