CVE-2021-37040

There is a Parameter injection vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause privilege escalation of files after CIFS share mounting.
Argument Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
huaweiCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 54%
VendorProductVersion
huaweiharmonyos
𝑥
< 2.0
huaweiemui
11.0.0
huaweimagic_ui
4.0.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://consumer.huawei.com/en/support/bulletin/2021/9/
https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-0000001196270727
https://consumer.huawei.com/en/support/bulletin/2021/9/
https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-0000001196270727