Details of VAR-202110-1480

ID

VAR-202110-1480

CVE

CVE-2021-36996

TITLE

Huawei Vulnerabilities in smartphones

Trust: 0.8

sources: JVNDB: JVNDB-2021-014262

DESCRIPTION

There is an Improper verification vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may cause transmission of certain virtual information. Huawei Smartphones have unspecified vulnerabilities.Information may be obtained

Trust: 1.71

sources: NVD: CVE-2021-36996 // JVNDB: JVNDB-2021-014262 // VULHUB: VHN-398829

AFFECTED PRODUCTS

vendor:	huawei	model:	emui	scope:	eq	version:	11.0.0	Trust: 1.0
vendor:	huawei	model:	magic ui	scope:	eq	version:	4.0.0	Trust: 1.0
vendor:	huawei	model:	emui	scope:	-	version:	-	Trust: 0.8
vendor:	huawei	model:	magic ui	scope:	-	version:	-	Trust: 0.8

sources: JVNDB: JVNDB-2021-014262 // NVD: CVE-2021-36996

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2021-36996
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2021-36996
value:	MEDIUM
Trust: 0.8
CNNVD:	CNNVD-202110-2095
value:	MEDIUM
Trust: 0.6
VULHUB:	VHN-398829
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2021-36996
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:P/I:N/A:N
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
VULHUB:	VHN-398829
severity:	MEDIUM
baseScore:	5.0
vectorString:	AV:N/AC:L/AU:N/C:P/I:N/A:N
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	10.0
impactScore:	2.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2021-36996
baseSeverity:	MEDIUM
baseScore:	5.3
vectorString:	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	LOW
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	3.9
impactScore:	1.4
version:	3.1
Trust: 1.0
NVD:	CVE-2021-36996
baseSeverity:	MEDIUM
baseScore:	5.3
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	LOW
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: VULHUB: VHN-398829 // JVNDB: JVNDB-2021-014262 // CNNVD: CNNVD-202110-2095 // NVD: CVE-2021-36996

PROBLEMTYPE DATA

problemtype:	NVD-CWE-noinfo	Trust: 1.0
problemtype:	Lack of information (CWE-noinfo) [NVD evaluation ]	Trust: 0.8

sources: JVNDB: JVNDB-2021-014262 // NVD: CVE-2021-36996

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-202110-2095

TYPE

other

Trust: 0.6

sources: CNNVD: CNNVD-202110-2095

PATCH

title:	CVE-2021-36996	url:	https://consumer.huawei.com/en/support/bulletin/2021/7/	Trust: 0.8
title:	Huawei Smartphone Security vulnerabilities	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=168232	Trust: 0.6

sources: JVNDB: JVNDB-2021-014262 // CNNVD: CNNVD-202110-2095

EXTERNAL IDS

db:	NVD	id:	CVE-2021-36996	Trust: 3.3
db:	JVNDB	id:	JVNDB-2021-014262	Trust: 0.8
db:	CNNVD	id:	CNNVD-202110-2095	Trust: 0.6
db:	VULHUB	id:	VHN-398829	Trust: 0.1

sources: VULHUB: VHN-398829 // JVNDB: JVNDB-2021-014262 // CNNVD: CNNVD-202110-2095 // NVD: CVE-2021-36996

REFERENCES

url:	https://consumer.huawei.com/en/support/bulletin/2021/7/	Trust: 1.7
url:	https://nvd.nist.gov/vuln/detail/cve-2021-36996	Trust: 1.4

sources: VULHUB: VHN-398829 // JVNDB: JVNDB-2021-014262 // CNNVD: CNNVD-202110-2095 // NVD: CVE-2021-36996

SOURCES

db:	VULHUB	id:	VHN-398829
db:	JVNDB	id:	JVNDB-2021-014262
db:	CNNVD	id:	CNNVD-202110-2095
db:	NVD	id:	CVE-2021-36996

LAST UPDATE DATE

2024-08-14T15:06:38.946000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-398829	date:	2021-11-01T00:00:00
db:	JVNDB	id:	JVNDB-2021-014262	date:	2022-10-11T08:46:00
db:	CNNVD	id:	CNNVD-202110-2095	date:	2021-11-03T00:00:00
db:	NVD	id:	CVE-2021-36996	date:	2021-11-01T21:24:06.690

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-398829	date:	2021-10-28T00:00:00
db:	JVNDB	id:	JVNDB-2021-014262	date:	2022-10-11T00:00:00
db:	CNNVD	id:	CNNVD-202110-2095	date:	2021-10-28T00:00:00
db:	NVD	id:	CVE-2021-36996	date:	2021-10-28T13:15:10.830