rainbutterfly/cve_corpus huggingface dataset:
CVE-2021-22280 DLL Hijacking Vulnerability in Automation Studio
Improper DLL loading algorithms in B&R Automation Studio versions >=4.0 and <4.12 may allow an authenticated local attacker to execute code in the context of the product.
Problem types: description: DLL Hijacking Vulnerability in Automation Studio
Affected products: vendor: B&R Industrial Automation
product: Automation Studio
default_status: unaffected
CVSS v3.1: attackComplexity: HIGH
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 7.2
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H
version: 3.1
Published: 2024-05-14T19:36:51.930Z
CVE-2021-22281 Zip Slip Vulnerability in B&R Automation Studio Project Import
: Relative Path Traversal vulnerability in B&R Industrial Automation Automation Studio allows Relative Path Traversal.This issue affects Automation Studio: from 4.0 through 4.12.


Problem types: cwe_id: CWE-23
description: CWE-23: Relative Path Traversal
Affected products: vendor: B&R Industrial Automation
product: Automation Studio
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 6.3
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: HIGH
privilegesRequired: NONE
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:N/I:H/A:N
version: 3.1
Credits: lang: en
value: B&R would like to thank the following for working with us to help protect our customers: Mr. Mashav Sapir of Claroty, Mr. Andrew Hofmans
Published: 2024-02-02T07:24:29.599Z
CVE-2021-22282 RCE in B&R Automation Studio with crafted project files
Improper Control of Generation of Code ('Code Injection') vulnerability in B&R Industrial Automation Automation Studio allows Local Execution of Code.This issue affects Automation Studio: from 4.0 through 4.12.


Problem types: cwe_id: CWE-94
description: CWE-94 Improper Control of Generation of Code ('Code Injection')
Affected products: vendor: B&R Industrial Automation
product: Automation Studio
default_status: unaffected
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.3
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: B&R would like to thank the following for working with us to help protect our customers: Mr. Mashav Sapir of Claroty, Mr. Andrew Hofmans
Published: 2024-02-02T06:38:32.358Z
CVE-2021-22284 SECURITY - OPC Server for AC 800M - Remote Code Execution Vulnerability
Incorrect Permission Assignment for Critical Resource vulnerability in OPC Server for AC 800M allows an attacker to execute arbitrary code in the node running the AC800M OPC Server.
Problem types: cwe_id: CWE-732
description: CWE-732 Incorrect Permission Assignment for Critical Resource
Affected products: vendor: ABB
product: 800xA, Control Software for AC 800M OPC Server for AC 800M
vendor: ABB
product: Control Builder Safe, version 1.x OPC Server for AC 800M
vendor: ABB
product: Control Builder Safe, version 2.0 OPC Server for AC 800M
vendor: ABB
product: Compact Product Suite - Control and I/O OPC Server for AC 800M
CVSS v3.1: attackComplexity: LOW
attackVector: ADJACENT_NETWORK
availabilityImpact: HIGH
baseScore: 8.4
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: ABB thanks William Knowles at Applied Risk for helping to identify the vulnerabilities and protecting our customers.
Published: 2022-02-04T22:29:21.143Z
CVE-2021-22285 SECURITY – Denial of Service Vulnerabilities in SPIET800 INFI-Net to Ethernet Transfer module and PNI800 S+ Ethernet communication interface module
Improper Handling of Exceptional Conditions, Improper Check for Unusual or Exceptional Conditions vulnerability in the ABB SPIET800 and PNI800 module that allows an attacker to cause the denial of service or make the module unresponsive.
Problem types: cwe_id: CWE-755
description: CWE-755 Improper Handling of Exceptional Conditions
cwe_id: CWE-754
description: CWE-754 Improper Check for Unusual or Exceptional Conditions
Affected products: vendor: ABB
product: SPIET800
vendor: ABB
product: PNI800
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Credits: lang: en
value: ABB thanks Lance Lamont from Verve Industrial Protection and Ron Brash from Verve Industrial Protection/aDolus Technology Inc. helping to identify the vulnerabilities and protecting our customers.
Published: 2022-02-04T22:29:19.694Z
CVE-2021-22286 SECURITY – Denial of Service Vulnerabilities in SPIET800 INFI-Net to Ethernet Transfer module and PNI800 S+ Ethernet communication interface module
Improper Input Validation vulnerability in the ABB SPIET800 and PNI800 module allows an attacker to cause the denial of service or make the module unresponsive.
Problem types: cwe_id: CWE-20
description: CWE-20 Improper Input Validation
Affected products: vendor: ABB
product: SPIET800
vendor: ABB
product: PNI800
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Credits: lang: en
value: ABB thanks Lance Lamont from Verve Industrial Protection and Ron Brash from Verve Industrial Protection/aDolus Technology Inc. helping to identify the vulnerabilities and protecting our customers.
Published: 2022-02-04T22:29:18.287Z
CVE-2021-22288 SECURITY – Denial of Service Vulnerabilities in SPIET800 INFI-Net to Ethernet Transfer module and PNI800 S+ Ethernet communication interface module
Improper Input Validation vulnerability in the ABB SPIET800 and PNI800 module allows an attacker to cause the denial of service or make the module unresponsive.
Problem types: cwe_id: CWE-20
description: CWE-20 Improper Input Validation
Affected products: vendor: ABB
product: SPIET800
vendor: ABB
product: PNI800
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 7.5
baseSeverity: HIGH
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
version: 3.1
Credits: lang: en
value: ABB thanks Lance Lamont from Verve Industrial Protection and Ron Brash from Verve Industrial Protection/aDolus Technology Inc. helping to identify the vulnerabilities and protecting our customers.
Published: 2022-02-04T22:29:18.996Z
CVE-2021-22289 RCE through Project Upload from Target
Improper Input Validation vulnerability in the project upload mechanism in B&R Automation Studio version >=4.0 may allow an unauthenticated network attacker to execute code.
Problem types: cwe_id: CWE-20
description: CWE-20 Improper Input Validation
Affected products: vendor: B&R Industrial Automation
product: Automation Studio
CVSS v3.1: attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.3
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: Mr. Mashav Sapir of Claroty
Published: 2022-08-11T14:56:02.000Z
CVE-2021-22291 EIBPORT Reflected XSS
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in ABB EIBPORT V3 KNX, ABB EIBPORT V3 KNX GSM.This issue affects EIBPORT V3 KNX: before 3.9.2; EIBPORT V3 KNX GSM: before 3.9.2.
Problem types: cwe_id: CWE-79
description: CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')
Affected products: vendor: ABB
product: EIBPORT V3  KNX
default_status: unaffected
vendor: ABB
product: EIBPORT V3  KNX GSM
default_status: unaffected
CVSS v3.1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
version: 3.1
Credits: lang: en
value: ABB acknowledges and thanks Psytester for responsibly disclosing the vulnerabilities and helping to verify the resolving implementation.
Published: 2025-10-07T13:29:06.908Z
CVE-2021-22292 
There is a denial of service (DoS) vulnerability in eCNS280 versions V100R005C00, V100R005C10. Due to a design defect, remote unauthorized attackers send a large number of specific messages to affected devices, causing system resource exhaustion and web application DoS.
Problem types: description: Denial of Service
Affected products: vendor: n/a
product: eCNS280
Published: 2021-02-06T02:09:20.000Z
CVE-2021-22293 
Some Huawei products have an inconsistent interpretation of HTTP requests vulnerability. Attackers can exploit this vulnerability to cause information leak. Affected product versions include: CampusInsight versions V100R019C10; ManageOne versions 6.5.1.1, 6.5.1.SPC100, 6.5.1.SPC200, 6.5.1RC1, 6.5.1RC2, 8.0.RC2. Affected product versions include: Taurus-AL00A versions 10.0.0.1(C00E1R1P1).
Problem types: description: Inconsistent Interpretation of HTTP Requests
Affected products: vendor: n/a
product: CampusInsight
vendor: n/a
product: ManageOne
Published: 2021-02-06T02:16:20.000Z
CVE-2021-22294 
A component API of the HarmonyOS 2.0 has a permission bypass vulnerability. Local attackers may exploit this vulnerability to issue commands repeatedly, exhausting system service resources.
Problem types: description: Authentication Bypass by Spoofing
Affected products: vendor: n/a
product: HarmonyOS
Published: 2021-03-02T18:11:34.000Z
CVE-2021-22295 
A component of the HarmonyOS has a permission bypass vulnerability. Local attackers may exploit this vulnerability to cause the device to hang due to the page error OsVmPageFaultHandler.
Problem types: description: Improper Restriction of Operations within the Bounds of a Memory Buffer
Affected products: vendor: Huawei
product: HarmonyOS
Published: 2021-08-06T12:54:49.000Z
CVE-2021-22296 
A component of HarmonyOS 2.0 has a DoS vulnerability. Local attackers may exploit this vulnerability to mount a file system to the target device, causing DoS of the file system.
Problem types: description: Attempt to Access Child of a Non-structure Pointer
Affected products: vendor: n/a
product: HarmonyOS
Published: 2021-03-02T18:08:24.000Z
CVE-2021-22298 
There is a logic vulnerability in Huawei Gauss100 OLTP Product. An attacker with certain permissions could perform specific SQL statement to exploit this vulnerability. Due to insufficient security design, successful exploit can cause service abnormal. Affected product versions include: ManageOne versions 6.5.1.1.B020, 6.5.1.1.B030, 6.5.1.1.B040, 6.5.1.SPC100.B050, 6.5.1.SPC101.B010, 6.5.1.SPC101.B040, 6.5.1.SPC200, 6.5.1.SPC200.B010, 6.5.1.SPC200.B030, 6.5.1.SPC200.B040, 6.5.1.SPC200.B050, 6.5.1.SPC200.B060, 6.5.1.SPC200.B070, 6.5.1RC1.B070, 6.5.1RC1.B080, 6.5.1RC2.B040, 6.5.1RC2.B050, 6.5.1RC2.B060, 6.5.1RC2.B070, 6.5.1RC2.B080, 6.5.1RC2.B090.
Problem types: description: Logic
Affected products: vendor: n/a
product: ManageOne
Published: 2021-02-06T01:31:07.000Z
CVE-2021-22299 
There is a local privilege escalation vulnerability in some Huawei products. A local, authenticated attacker could craft specific commands to exploit this vulnerability. Successful exploitation may cause the attacker to obtain a higher privilege. Affected product versions include: ManageOne versions 6.5.0,6.5.0.SPC100.B210,6.5.1.1.B010,6.5.1.1.B020,6.5.1.1.B030,6.5.1.1.B040,6.5.1.SPC100.B050,6.5.1.SPC101.B010,6.5.1.SPC101.B040,6.5.1.SPC200,6.5.1.SPC200.B010,6.5.1.SPC200.B030,6.5.1.SPC200.B040,6.5.1.SPC200.B050,6.5.1.SPC200.B060,6.5.1.SPC200.B070,6.5.1RC1.B060,6.5.1RC2.B020,6.5.1RC2.B030,6.5.1RC2.B040,6.5.1RC2.B050,6.5.1RC2.B060,6.5.1RC2.B070,6.5.1RC2.B080,6.5.1RC2.B090,6.5.RC2.B050,8.0.0,8.0.0-LCND81,8.0.0.SPC100,8.0.1,8.0.RC2,8.0.RC3,8.0.RC3.B041,8.0.RC3.SPC100; NFV_FusionSphere versions 6.5.1.SPC23,8.0.0.SPC12; SMC2.0 versions V600R019C00,V600R019C10; iMaster MAE-M versions MAE-TOOL(FusionSphereBasicTemplate_Euler_X86)V100R020C10SPC220.
Problem types: description: Local Privilege Escalation
Affected products: vendor: n/a
product: ManageOne
vendor: n/a
product: NFV_FusionSphere
vendor: n/a
product: SMC2.0
vendor: n/a
product: iMaster MAE-M
Published: 2021-02-06T01:53:36.000Z
CVE-2021-22300 
There is an information leak vulnerability in eCNS280_TD versions V100R005C00 and V100R005C10. A command does not have timeout exit mechanism. Temporary file contains sensitive information. This allows attackers to obtain information by inter-process access that requires other methods.
Problem types: description: Information Leak
Affected products: vendor: n/a
product: eCNS280_TD
Published: 2021-02-06T00:38:25.000Z
CVE-2021-22301 
Mate 30 10.0.0.203(C00E201R7P2) have a buffer overflow vulnerability. After obtaining the root permission, an attacker can exploit the vulnerability to cause buffer overflow.
Problem types: description: Buffer Overflow
Affected products: vendor: n/a
product: HUAWEI Mate 30
Published: 2021-02-05T23:56:37.000Z
CVE-2021-22302 
There is an out-of-bound read vulnerability in Taurus-AL00A 10.0.0.1(C00E1R1P1). A module does not verify the some input. Attackers can exploit this vulnerability by sending malicious input through specific app. This could cause out-of-bound, compromising normal service.
Problem types: description: Out-of-Bound Read
Affected products: vendor: n/a
product: Taurus-AL00A
Published: 2021-02-06T02:03:45.000Z
CVE-2021-22303 
There is a pointer double free vulnerability in Taurus-AL00A 10.0.0.1(C00E1R1P1). There is a lack of muti-thread protection when a function is called. Attackers can exploit this vulnerability by performing malicious operation to cause pointer double free. This may lead to module crash, compromising normal service.
Problem types: description: Pointer Double Free
Affected products: vendor: n/a
product: Taurus-AL00A
Published: 2021-02-06T00:04:57.000Z
CVE-2021-22304 
There is a use after free vulnerability in Taurus-AL00A 10.0.0.1(C00E1R1P1). A module may refer to some memory after it has been freed while dealing with some messages. Attackers can exploit this vulnerability by sending specific message to the affected module. This may lead to module crash, compromising normal service.
Problem types: description: Use After Free
Affected products: vendor: n/a
product: Taurus-AL00A
Published: 2021-02-06T02:18:09.000Z
CVE-2021-22305 
There is a buffer overflow vulnerability in Mate 30 10.1.0.126(C00E125R5P3). A module does not verify the some input when dealing with messages. Attackers can exploit this vulnerability by sending malicious input through specific module. This could cause buffer overflow, compromising normal service.
Problem types: description: Buffer Overflow
Affected products: vendor: n/a
product: HUAWEI Mate 30
Published: 2021-02-06T02:20:01.000Z
CVE-2021-22306 
There is an out-of-bound read vulnerability in Mate 30 10.0.0.182(C00E180R6P2). A module does not verify the some input when dealing with messages. Attackers can exploit this vulnerability by sending malicious input through specific module. This could cause out-of-bound, compromising normal service.
Problem types: description: Out-of-Bound Read
Affected products: vendor: n/a
product: HUAWEI Mate 30
Published: 2021-02-06T00:48:18.000Z
CVE-2021-22307 
There is a weak algorithm vulnerability in Mate 3010.0.0.203(C00E201R7P2). The protection is insufficient for the modules that should be protected. Local attackers can exploit this vulnerability to affect the integrity of certain module.
Problem types: description: Weak Algorithms
Affected products: vendor: n/a
product: HUAWEI Mate 30
Published: 2021-02-06T00:00:03.000Z
CVE-2021-22308 
There is a Business Logic Errors vulnerability in Huawei Smartphone. The malicious apps installed on the device can keep taking screenshots in the background. This issue does not cause system errors, but may cause personal information leakage.
Problem types: description: Business Logic Errors
Affected products: vendor: n/a
product: EMUI;Magic UI
Published: 2021-06-03T15:15:20.000Z
CVE-2021-22309 
There is insecure algorithm vulnerability in Huawei products. A module uses less random input in a secure mechanism. Attackers can exploit this vulnerability by brute forcing to obtain sensitive message. This can lead to information leak. Affected product versions include:USG9500 versions V500R001C30SPC200, V500R001C60SPC500,V500R005C00SPC200;USG9520 versions V500R005C00;USG9560 versions V500R005C00;USG9580 versions V500R005C00.
Problem types: description: Information Leakage
Affected products: vendor: n/a
product: USG9500,USG9520,USG9560,USG9580
Published: 2021-03-22T17:42:50.000Z
CVE-2021-22310 
There is an information leakage vulnerability in some huawei products. Due to the properly storage of specific information in the log file, the attacker can obtain the information when a user logs in to the device. Successful exploit may cause an information leak. Affected product versions include: NIP6300 versions V500R001C00,V500R001C20,V500R001C30;NIP6600 versions V500R001C00,V500R001C20,V500R001C30;Secospace USG6300 versions V500R001C00,V500R001C20,V500R001C30;Secospace USG6500 versions V500R001C00,V500R001C20,V500R001C30;Secospace USG6600 versions V500R001C00,V500R001C20,V500R001C30,V500R001C50,V500R001C60,V500R001C80;USG9500 versions V500R005C00,V500R005C10.
Problem types: description: Information Leakage
Affected products: vendor: n/a
product: NIP6300;NIP6600;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG9500
Published: 2021-03-22T18:38:09.000Z
CVE-2021-22311 
There is an improper permission assignment vulnerability in Huawei ManageOne product. Due to improper security hardening, the process can run with a higher privilege. Successful exploit could allow certain users to do certain operations with improper permissions. Affected product versions include: ManageOne versions 8.0.0, 8.0.1.
Problem types: description: Improper Permission Assignment
Affected products: vendor: n/a
product: ManageOne
Published: 2021-03-22T18:47:02.000Z
CVE-2021-22312 
There is a memory leak vulnerability in some Huawei products. An authenticated remote attacker may exploit this vulnerability by sending specific message to the affected product. Due to not release the allocated memory properly, successful exploit may cause some service abnormal. Affected product include some versions of IPS Module, NGFW Module, Secospace USG6300, Secospace USG6500, Secospace USG6600 and USG9500.
Problem types: description: Memory Leak
Affected products: vendor: n/a
product: IPS Module;NGFW Module;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG9500
Published: 2021-04-08T18:18:36.000Z
CVE-2021-22313 
There is a Security Function vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may impair data confidentiality.
Problem types: description: Security Function
Affected products: vendor: n/a
product: EMUI;Magic UI
Published: 2021-06-03T15:19:46.000Z
CVE-2021-22314 
There is a local privilege escalation vulnerability in some versions of ManageOne. A local authenticated attacker could perform specific operations to exploit this vulnerability. Successful exploitation may cause the attacker to obtain a higher privilege and compromise the service.
Problem types: description: Local Privilege Escalation
Affected products: vendor: n/a
product: ManageOne
Published: 2021-03-22T19:13:00.000Z
CVE-2021-22316 
There is a Missing Authentication for Critical Function vulnerability in Huawei Smartphone. Attackers with physical access to the device can thereby exploit this vulnerability. A successful exploitation of this vulnerability can compromise the device's data security and functional availability.
Problem types: description: Missing Authentication for Critical Function
Affected products: vendor: n/a
product: EMUI;Magic UI
Published: 2021-06-03T15:42:58.000Z
CVE-2021-22317 
There is an Information Disclosure vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may impair data confidentiality.
Problem types: description: Information Disclosure Vulnerability
Affected products: vendor: n/a
product: EMUI;Magic UI
Published: 2021-06-03T15:30:45.000Z
CVE-2021-22318 
A component of the HarmonyOS 2.0 has a Null Pointer Dereference Vulnerability. Local attackers may exploit this vulnerability to cause system denial of service.
Problem types: description: NULL Pointer Dereference
Affected products: vendor: n/a
product: HarmonyOS
Published: 2021-07-14T10:46:02.000Z
CVE-2021-22319 
There is an improper verification vulnerability in smartphones. Successful exploitation of this vulnerability may cause integer overflows.
Problem types: description: Improper verification vulnerability
Affected products: vendor: Huawei
product: EMUI
vendor: Huawei
product: Magic UI
vendor: Huawei
product: HarmonyOS
Published: 2022-02-25T18:11:05.000Z
CVE-2021-22320 
There is a denial of service vulnerability in Huawei products. A module cannot deal with specific messages correctly. Attackers can exploit this vulnerability by sending malicious messages to an affected module. This can lead to denial of service. Affected product include some versions of IPS Module, NGFW Module, NIP6600, NIP6800, Secospace USG6300, Secospace USG6500 and Secospace USG6600.
Problem types: description: Denial of Service
Affected products: vendor: n/a
product: IPS Module;NGFW Module;NIP6600;NIP6800;Secospace USG6300;Secospace USG6500;Secospace USG6600
Published: 2021-03-22T18:41:58.000Z
CVE-2021-22321 
There is a use-after-free vulnerability in a Huawei product. A module cannot deal with specific operations in special scenarios. Attackers can exploit this vulnerability by performing malicious operations. This can cause memory use-after-free, compromising normal service. Affected product include some versions of NIP6300, NIP6600, NIP6800, S1700, S2700, S5700, S6700 , S7700, S9700, Secospace USG6300, Secospace USG6500, Secospace USG6600 and USG9500.
Problem types: description: Use After Free
Affected products: vendor: n/a
product: NIP6600;NIP6800;S12700;S1700;S2700;S5700;S6700;S7700;S9700;Secospace USG6300;Secospace USG6500;Secospace USG6600;USG9500
Published: 2021-03-22T19:03:52.000Z
CVE-2021-22322 
There is a Missing Authentication for Critical Function vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may impair data confidentiality.
Problem types: description: Missing Authentication for Critical Function
Affected products: vendor: n/a
product: EMUI;Magic UI
Published: 2021-06-03T15:49:12.000Z
CVE-2021-22323 
There is an Integer Overflow Vulnerability in Huawei Smartphone. Successful exploitation of these vulnerabilities may escalate the permission to that of the root user.
Problem types: description: Integer Overflow Vulnerability
Affected products: vendor: n/a
product: EMUI;Magic UI
Published: 2021-06-30T14:53:25.000Z
CVE-2021-22324 
There is a Credentials Management Errors vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may impair data confidentiality.
Problem types: description: Credentials Management Errors
Affected products: vendor: n/a
product: EMUI;Magic UI
Published: 2021-06-03T16:21:01.000Z