Sign-up

ID

VAR-202108-0283


CVE

CVE-2021-22419


TITLE

HarmonyOS  Vulnerability for inadequate validation of data reliability in

Trust: 0.8

sources: JVNDB: JVNDB-2021-009371

DESCRIPTION

A component of the HarmonyOS has a Insufficient Verification of Data Authenticity vulnerability. Local attackers may exploit this vulnerability to cause persistent dos. HarmonyOS Exists in an inadequate validation of data reliability vulnerabilities.Denial of service (DoS) It may be put into a state

Trust: 1.8

sources: NVD: CVE-2021-22419 // JVNDB: JVNDB-2021-009371 // VULHUB: VHN-380854 // VULMON: CVE-2021-22419

AFFECTED PRODUCTS

vendor:huaweimodel:harmonyosscope:eqversion:2.0

Trust: 1.0

vendor:huaweimodel:harmonyosscope: - version: -

Trust: 0.8

vendor:huaweimodel:harmonyosscope:eqversion: -

Trust: 0.8

sources: JVNDB: JVNDB-2021-009371 // NVD: CVE-2021-22419

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2021-22419
value: MEDIUM

Trust: 1.0

NVD: CVE-2021-22419
value: MEDIUM

Trust: 0.8

CNNVD: CNNVD-202108-316
value: MEDIUM

Trust: 0.6

VULHUB: VHN-380854
value: MEDIUM

Trust: 0.1

VULMON: CVE-2021-22419
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2021-22419
severity: MEDIUM
baseScore: 4.9
vectorString: AV:L/AC:L/AU:N/C:N/I:N/A:C
accessVector: LOCAL
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: COMPLETE
exploitabilityScore: 3.9
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.9

VULHUB: VHN-380854
severity: MEDIUM
baseScore: 4.9
vectorString: AV:L/AC:L/AU:N/C:N/I:N/A:C
accessVector: LOCAL
accessComplexity: LOW
authentication: NONE
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: COMPLETE
exploitabilityScore: 3.9
impactScore: 6.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

nvd@nist.gov: CVE-2021-22419
baseSeverity: MEDIUM
baseScore: 5.5
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: HIGH
exploitabilityScore: 1.8
impactScore: 3.6
version: 3.1

Trust: 1.0

NVD: CVE-2021-22419
baseSeverity: MEDIUM
baseScore: 5.5
vectorString: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: NONE
integrityImpact: NONE
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: VULHUB: VHN-380854 // VULMON: CVE-2021-22419 // JVNDB: JVNDB-2021-009371 // CNNVD: CNNVD-202108-316 // NVD: CVE-2021-22419

PROBLEMTYPE DATA

problemtype:CWE-345

Trust: 1.1

problemtype:Inadequate verification of data reliability (CWE-345) [NVD Evaluation ]

Trust: 0.8

sources: VULHUB: VHN-380854 // JVNDB: JVNDB-2021-009371 // NVD: CVE-2021-22419

THREAT TYPE

local

Trust: 0.6

sources: CNNVD: CNNVD-202108-316

TYPE

data forgery

Trust: 0.6

sources: CNNVD: CNNVD-202108-316

PATCH

title:Keisei Expectationsurl:https://device.harmonyos.com/cn/docs/security/update/oem_security_update_phone_202106-0000001165452077

Trust: 0.8

title:Huawei HarmonyOS Repair measures for data forgery problem vulnerabilitiesurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=159647

Trust: 0.6

sources: JVNDB: JVNDB-2021-009371 // CNNVD: CNNVD-202108-316

EXTERNAL IDS

db:NVDid:CVE-2021-22419

Trust: 3.4

db:JVNDBid:JVNDB-2021-009371

Trust: 0.8

db:CNNVDid:CNNVD-202108-316

Trust: 0.6

db:VULHUBid:VHN-380854

Trust: 0.1

db:VULMONid:CVE-2021-22419

Trust: 0.1

sources: VULHUB: VHN-380854 // VULMON: CVE-2021-22419 // JVNDB: JVNDB-2021-009371 // CNNVD: CNNVD-202108-316 // NVD: CVE-2021-22419

REFERENCES

url:https://device.harmonyos.com/cn/docs/security/update/oem_security_update_phone_202106-0000001165452077

Trust: 1.8

url:https://nvd.nist.gov/vuln/detail/cve-2021-22419

Trust: 1.4

url:https://device.harmonyos.com/cn/docs/security/update/security-bulletins-phones-202106-0000001165452077

Trust: 0.6

url:https://cwe.mitre.org/data/definitions/345.html

Trust: 0.1

url:https://nvd.nist.gov

Trust: 0.1

sources: VULHUB: VHN-380854 // VULMON: CVE-2021-22419 // JVNDB: JVNDB-2021-009371 // CNNVD: CNNVD-202108-316 // NVD: CVE-2021-22419

SOURCES

db:VULHUBid:VHN-380854
db:VULMONid:CVE-2021-22419
db:JVNDBid:JVNDB-2021-009371
db:CNNVDid:CNNVD-202108-316
db:NVDid:CVE-2021-22419

LAST UPDATE DATE

2024-08-14T14:50:12.796000+00:00


SOURCES UPDATE DATE

db:VULHUBid:VHN-380854date:2021-08-11T00:00:00
db:VULMONid:CVE-2021-22419date:2021-08-11T00:00:00
db:JVNDBid:JVNDB-2021-009371date:2022-04-21T08:58:00
db:CNNVDid:CNNVD-202108-316date:2021-11-29T00:00:00
db:NVDid:CVE-2021-22419date:2021-08-11T13:29:31.587

SOURCES RELEASE DATE

db:VULHUBid:VHN-380854date:2021-08-03T00:00:00
db:VULMONid:CVE-2021-22419date:2021-08-03T00:00:00
db:JVNDBid:JVNDB-2021-009371date:2022-04-21T00:00:00
db:CNNVDid:CNNVD-202108-316date:2021-08-03T00:00:00
db:NVDid:CVE-2021-22419date:2021-08-03T18:15:08.090