CVE-2021-46813 — Improper Removal of Sensitive Information Before Storage or Transfer in Huawei Emui

CWE-212 — Improper Removal of Sensitive Information Before Storage or Transfer3 documents3 sources
Severity
7.5HIGHNVD
EPSS
0.3%
top 51.50%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Huawei EmuiHuawei Magic UI
Timeline
PublishedJun 13
Latest updateJun 14

Description

Vulnerability of residual files not being deleted after an update in the ChinaDRM module. Successful exploitation of this vulnerability may affect availability.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:HExploitability: 3.9 | Impact: 3.6

Affected Packages4 packages

▶CVEListV5huawei/emui11.0.0
▶NVDhuawei/emui11.0.0
▶CVEListV5huawei/magic_ui4.0.0
▶NVDhuawei/magic_ui4.0.0

🔴Vulnerability Details

2
GHSA
GHSA-c3m3-28hq-w97p: Vulnerability of residual files not being deleted after an update in the ChinaDRM module↗2022-06-14
▶
CVEList
CVE-2021-46813: Vulnerability of residual files not being deleted after an update in the ChinaDRM module↗2022-06-13
▶
CVE-2021-46813 — Huawei Emui vulnerability | cvebase