deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2021-42124
Published: 2021-12-07
Description: An improper access control vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform a session takeover.
CVSS Score: 8.8 (HIGH)
CWE: CWE-284
References: https://forums.ivanti.com/s/article/Security-Alert-CVE-s-Addressed-in-Avalanche-6-3-3; https://forums.ivanti.com/s/article/Security-Alert-CVE-s-Addressed-in-Avalanche-6-3-3
CVE: CVE-2021-42125
Published: 2021-12-07
Description: An unrestricted file upload vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to write dangerous files.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502, CWE-434
References: https://forums.ivanti.com/s/article/Security-Alert-CVE-s-Addressed-in-Avalanche-6-3-3; https://forums.ivanti.com/s/article/Security-Alert-CVE-s-Addressed-in-Avalanche-6-3-3
CVE: CVE-2021-42126
Published: 2021-12-07
Description: An improper authorization control vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform privilege escalation.
CVSS Score: 8.8 (HIGH)
CWE: CWE-285
References: https://forums.ivanti.com/s/article/Security-Alert-CVE-s-Addressed-in-Avalanche-6-3-3; https://forums.ivanti.com/s/article/Security-Alert-CVE-s-Addressed-in-Avalanche-6-3-3
CVE: CVE-2021-42127
Published: 2021-12-07
Description: A deserialization of untrusted data vulnerability exists in Ivanti Avalanche before 6.3.3 using Inforail Service allows arbitrary code execution via Data Repository Service.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-502, CWE-502
References: https://forums.ivanti.com/s/article/Security-Alert-CVE-s-Addressed-in-Avalanche-6-3-3; https://forums.ivanti.com/s/article/Security-Alert-CVE-s-Addressed-in-Avalanche-6-3-3
CVE: CVE-2021-42128
Published: 2021-12-07
Description: An exposed dangerous function vulnerability exists in Ivanti Avalanche before 6.3.3 using inforail Service allows Privilege Escalation via Enterprise Server Service.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-749
References: https://forums.ivanti.com/s/article/Security-Alert-CVE-s-Addressed-in-Avalanche-6-3-3; https://forums.ivanti.com/s/article/Security-Alert-CVE-s-Addressed-in-Avalanche-6-3-3
CVE: CVE-2021-42129
Published: 2021-12-07
Description: A command injection vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform arbitrary command execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77, CWE-77
References: https://forums.ivanti.com/s/article/Security-Alert-CVE-s-Addressed-in-Avalanche-6-3-3; https://forums.ivanti.com/s/article/Security-Alert-CVE-s-Addressed-in-Avalanche-6-3-3
CVE: CVE-2021-42130
Published: 2021-12-07
Description: A deserialization of untrusted data vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform arbitrary code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-502, CWE-502
References: https://forums.ivanti.com/s/article/Security-Alert-CVE-s-Addressed-in-Avalanche-6-3-3; https://forums.ivanti.com/s/article/Security-Alert-CVE-s-Addressed-in-Avalanche-6-3-3
CVE: CVE-2021-42131
Published: 2021-12-07
Description: A SQL Injection vulnerability exists in Ivanti Avalance before 6.3.3 allows an attacker with access to the Inforail Service to perform privilege escalation.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://forums.ivanti.com/s/article/Security-Alert-CVE-s-Addressed-in-Avalanche-6-3-3; https://forums.ivanti.com/s/article/Security-Alert-CVE-s-Addressed-in-Avalanche-6-3-3
CVE: CVE-2021-42132
Published: 2021-12-07
Description: A command Injection vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform arbitrary command execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77, CWE-77
References: https://forums.ivanti.com/s/article/Security-Alert-CVE-s-Addressed-in-Avalanche-6-3-3; https://forums.ivanti.com/s/article/Security-Alert-CVE-s-Addressed-in-Avalanche-6-3-3
CVE: CVE-2021-42133
Published: 2021-12-07
Description: An exposed dangerous function vulnerability exists in Ivanti Avalanche before 6.3.3 allows an attacker with access to the Inforail Service to perform an arbitrary file write.
CVSS Score: 8.1 (HIGH)
CWE: CWE-434, CWE-829
References: https://forums.ivanti.com/s/article/Security-Alert-CVE-s-Addressed-in-Avalanche-6-3-3; https://forums.ivanti.com/s/article/Security-Alert-CVE-s-Addressed-in-Avalanche-6-3-3
CVE: CVE-2021-44185
Published: 2021-12-07
Description: Adobe Bridge version 11.1.2 (and earlier) and version 12.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious RGB file.
CVSS Score: 3.3 (LOW)
CWE: CWE-125, CWE-125
References: https://helpx.adobe.com/security/products/bridge/apsb22-03.html; https://helpx.adobe.com/security/products/bridge/apsb22-03.html
CVE: CVE-2021-44186
Published: 2021-12-07
Description: Adobe Bridge version 11.1.2 (and earlier) and version 12.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious SGI file.
CVSS Score: 3.3 (LOW)
CWE: CWE-125, CWE-125
References: https://helpx.adobe.com/security/products/bridge/apsb22-03.html; https://helpx.adobe.com/security/products/bridge/apsb22-03.html
CVE: CVE-2021-44187
Published: 2021-12-07
Description: Adobe Bridge version 11.1.2 (and earlier) and version 12.0 (and earlier) are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim must open a malicious SGI file.
CVSS Score: 3.3 (LOW)
CWE: CWE-125, CWE-125
References: https://helpx.adobe.com/security/products/bridge/apsb22-03.html; https://helpx.adobe.com/security/products/bridge/apsb22-03.html
CVE: CVE-2021-44527
Published: 2021-12-07
Description: A vulnerability found in UniFi Switch firmware Version 5.43.35 and earlier allows a malicious actor who has already gained access to the network to perform a Deny of Service (DoS) attack on the affected switch.This vulnerability is fixed in UniFi Switch firmware 5.76.6 and later.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-400, CWE-400
References: https://community.ui.com/releases/Security-Advisory-Bulletin-022-022/cd83c01b-33e4-454a-b3b9-1c3ccebea7cb; https://community.ui.com/releases/Security-Advisory-Bulletin-022-022/cd83c01b-33e4-454a-b3b9-1c3ccebea7cb
CVE: CVE-2020-19611
Published: 2021-12-07
Description: Cross Site Scripting (XSS) in redirect module of Racktables version 0.21.2, allows an attacker to inject arbitrary web script or HTML via the op parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://racktables.com; https://github.com/RackTables/racktables/commit/2ce35adeaa47f60dc51875b2339725db3b23e827; http://racktables.com
CVE: CVE-2021-37038
Published: 2021-12-07
Description: There is an Improper access control vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.
CVSS Score: 7.5 (HIGH)
References: https://consumer.huawei.com/en/support/bulletin/2021/9/; https://consumer.huawei.com/en/support/bulletin/2021/9/
CVE: CVE-2021-37041
Published: 2021-12-07
Description: There is an Improper verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause out-of-bounds read.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125
References: https://consumer.huawei.com/en/support/bulletin/2021/9/; https://consumer.huawei.com/om/support/bulletin/2021/10/; https://consumer.huawei.com/en/support/bulletin/2021/9/
CVE: CVE-2021-37042
Published: 2021-12-07
Description: There is an Improper verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause out-of-bounds read.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-125
References: https://consumer.huawei.com/en/support/bulletin/2021/9/; https://consumer.huawei.com/om/support/bulletin/2021/10/; https://consumer.huawei.com/en/support/bulletin/2021/9/
CVE: CVE-2021-37046
Published: 2021-12-07
Description: There is a Memory leak vulnerability with the codec detection module in Huawei Smartphone.Successful exploitation of this vulnerability may cause the device to restart due to memory exhaustion.
CVSS Score: 7.5 (HIGH)
CWE: CWE-401
References: https://consumer.huawei.com/en/support/bulletin/2021/9/; https://consumer.huawei.com/en/support/bulletin/2021/9/
CVE: CVE-2021-37047
Published: 2021-12-07
Description: There is an Input verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause some services to restart.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://consumer.huawei.com/en/support/bulletin/2021/9/; https://consumer.huawei.com/en/support/bulletin/2021/9/
CVE: CVE-2021-37055
Published: 2021-12-07
Description: There is a Logic bypass vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may allow attempts to obtain certain device information.
CVSS Score: 5.3 (MEDIUM)
References: https://consumer.huawei.com/en/support/bulletin/2021/9/; https://consumer.huawei.com/en/support/bulletin/2021/9/
CVE: CVE-2021-37056
Published: 2021-12-07
Description: There is an Improper permission control vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may allow attempts to obtain certain device information.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-281
References: https://consumer.huawei.com/en/support/bulletin/2021/9/; https://consumer.huawei.com/om/support/bulletin/2021/10/; https://consumer.huawei.com/en/support/bulletin/2021/9/
CVE: CVE-2021-37011
Published: 2021-12-07
Description: There is a Stack-based Buffer Overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to Out-of-bounds read.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-787
References: https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]
CVE: CVE-2021-37014
Published: 2021-12-07
Description: There is a Stack-based Buffer Overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to device cannot be used properly.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787
References: https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]
CVE: CVE-2021-37020
Published: 2021-12-07
Description: There is a Stack-based Buffer Overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to Out-of-bounds read.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-787
References: https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]
CVE: CVE-2021-37021
Published: 2021-12-07
Description: There is a Stack-based Buffer Overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to Out-of-bounds read.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-787
References: https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]
CVE: CVE-2021-37043
Published: 2021-12-07
Description: There is a Stack-based Buffer Overflow vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to malicious application processes occupy system resources.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]
CVE: CVE-2021-37048
Published: 2021-12-07
Description: There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to fake visitors to control PC,play a video,etc.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]
CVE: CVE-2021-37057
Published: 2021-12-07
Description: There is a Improper Validation of Array Index vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to restart the phone.
CVSS Score: 7.5 (HIGH)
CWE: CWE-129
References: https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]
CVE: CVE-2021-37058
Published: 2021-12-07
Description: There is a Permissions,Privileges,and Access Controls vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to the user's nickname is maliciously tampered with.
CVSS Score: 5.3 (MEDIUM)
References: https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]
CVE: CVE-2021-37059
Published: 2021-12-07
Description: There is a Weaknesses Introduced During Design
CVSS Score: 9.8 (CRITICAL)
References: https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]
CVE: CVE-2021-37060
Published: 2021-12-07
Description: There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to SAMGR Heap Address Leakage.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]
CVE: CVE-2021-37061
Published: 2021-12-07
Description: There is a Uncontrolled Resource Consumption vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to Screen projection application denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]
CVE: CVE-2021-37062
Published: 2021-12-07
Description: There is a Improper Validation of Array Index vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to memory overflow and information leakage.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-129
References: https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]
CVE: CVE-2021-37063
Published: 2021-12-07
Description: There is a Cryptographic Issues vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to read and delete images of Harmony devices.
CVSS Score: 9.8 (CRITICAL)
References: https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]
CVE: CVE-2021-37064
Published: 2021-12-07
Description: There is a Improper Limitation of a Pathname to a Restricted Directory vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to arbitrary file created.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-22
References: https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]
CVE: CVE-2021-37065
Published: 2021-12-07
Description: There is a Integer Overflow or Wraparound vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to Confidentiality or Availability impacted.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-190
References: https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]
CVE: CVE-2021-37066
Published: 2021-12-07
Description: There is a Out-of-bounds Read vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to process crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]
CVE: CVE-2021-37067
Published: 2021-12-07
Description: There is a Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to Confidentiality impacted.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200
References: https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]
CVE: CVE-2021-37068
Published: 2021-12-07
Description: There is a Resource Management Errors vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to denial of Service Attacks.
CVSS Score: 7.5 (HIGH)
References: https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]
CVE: CVE-2021-37070
Published: 2021-12-07
Description: There is a Out-of-bounds Read vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to process crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]
CVE: CVE-2021-37071
Published: 2021-12-07
Description: There is a Business Logic Errors vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to persistent dos.
CVSS Score: 7.5 (HIGH)
References: https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]
CVE: CVE-2021-37072
Published: 2021-12-07
Description: There is a Incorrect Calculation of Buffer Size vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to memory crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-415
References: https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]
CVE: CVE-2021-37073
Published: 2021-12-07
Description: There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to the detection result is tampered with.
CVSS Score: 3.7 (LOW)
CWE: CWE-362
References: https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]
CVE: CVE-2021-37076
Published: 2021-12-07
Description: There is a Out-of-bounds Read vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to availability affected.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]
CVE: CVE-2021-37077
Published: 2021-12-07
Description: There is a NULL Pointer Dereference vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to kernel crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]
CVE: CVE-2021-37078
Published: 2021-12-07
Description: There is a Uncaught Exception vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to remote Denial of Service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-755
References: https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]
CVE: CVE-2021-37079
Published: 2021-12-07
Description: There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to delete arbitrary file by system_app permission.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-94
References: https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]
CVE: CVE-2021-37080
Published: 2021-12-07
Description: There is a Incomplete Cleanup vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to availability affected.
CVSS Score: 7.5 (HIGH)
CWE: CWE-459
References: https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]
CVE: CVE-2021-37081
Published: 2021-12-07
Description: There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to nearby crash.
CVSS Score: 7.5 (HIGH)
CWE: CWE-20
References: https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]
CVE: CVE-2021-37082
Published: 2021-12-07
Description: There is a Race Condition vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to motionhub crash.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-362
References: https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]
CVE: CVE-2021-37083
Published: 2021-12-07
Description: There is a NULL Pointer Dereference vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to Denial of Service Attacks.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]
CVE: CVE-2021-37084
Published: 2021-12-07
Description: There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to malicious invoking other functions of the Smart Assistant through text messages.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-20
References: https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-[PII_REDACTED]