CVE-2021-40053 — Incorrect Default Permissions in Huawei Emui

CWE-276 — Incorrect Default Permissions3 documents3 sources
Severity
9.1CRITICALNVD
EPSS
0.2%
top 63.81%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Huawei EmuiHuawei HarmonyosHuawei Magic UI
Timeline
PublishedMar 10
Latest updateMar 11

Description

There is a permission control vulnerability in the Nearby module.Successful exploitation of this vulnerability will affect availability and integrity.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:HExploitability: 3.9 | Impact: 5.2

Affected Packages3 packages

▶NVDhuawei/emui4 versions+3
▶NVDhuawei/magic_ui4 versions+3
▶NVDhuawei/harmonyos2.0, 2.1+1

🔴Vulnerability Details

2
GHSA
GHSA-6465-pr9x-552x: There is a permission control vulnerability in the Nearby module↗2022-03-11
▶
CVEList
CVE-2021-40053: There is a permission control vulnerability in the Nearby module↗2022-03-07
▶
CVE-2021-40053 — Incorrect Default Permissions | cvebase