Sign-up

ID

VAR-202112-0251


CVE

CVE-2021-37063


TITLE

Huawei  Vulnerabilities in smartphones

Trust: 0.8

sources: JVNDB: JVNDB-2021-016037

DESCRIPTION

There is a Cryptographic Issues vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to read and delete images of Harmony devices. Huawei Smartphones have unspecified vulnerabilities.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state

Trust: 1.71

sources: NVD: CVE-2021-37063 // JVNDB: JVNDB-2021-016037 // VULHUB: VHN-398897

AFFECTED PRODUCTS

vendor:huaweimodel:harmonyosscope:ltversion:2.0

Trust: 1.0

vendor:huaweimodel:harmonyosscope: - version: -

Trust: 0.8

vendor:huaweimodel:harmonyosscope:eqversion: -

Trust: 0.8

sources: JVNDB: JVNDB-2021-016037 // NVD: CVE-2021-37063

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2021-37063
value: CRITICAL

Trust: 1.0

NVD: CVE-2021-37063
value: CRITICAL

Trust: 0.8

CNNVD: CNNVD-202109-2059
value: CRITICAL

Trust: 0.6

VULHUB: VHN-398897
value: HIGH

Trust: 0.1

nvd@nist.gov: CVE-2021-37063
severity: HIGH
baseScore: 7.5
vectorString: AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

VULHUB: VHN-398897
severity: HIGH
baseScore: 7.5
vectorString: AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

nvd@nist.gov: CVE-2021-37063
baseSeverity: CRITICAL
baseScore: 9.8
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 3.9
impactScore: 5.9
version: 3.1

Trust: 1.0

NVD: CVE-2021-37063
baseSeverity: CRITICAL
baseScore: 9.8
vectorString: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: VULHUB: VHN-398897 // JVNDB: JVNDB-2021-016037 // CNNVD: CNNVD-202109-2059 // NVD: CVE-2021-37063

PROBLEMTYPE DATA

problemtype:NVD-CWE-noinfo

Trust: 1.0

problemtype:Lack of information (CWE-noinfo) [NVD evaluation ]

Trust: 0.8

sources: JVNDB: JVNDB-2021-016037 // NVD: CVE-2021-37063

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-202109-2059

TYPE

other

Trust: 0.6

sources: CNNVD: CNNVD-202109-2059

PATCH

title:security-bulletins-202109-0000001196270727url:https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-0000001196270727

Trust: 0.8

title:Huawei HarmonyOS Security vulnerabilitiesurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=173527

Trust: 0.6

sources: JVNDB: JVNDB-2021-016037 // CNNVD: CNNVD-202109-2059

EXTERNAL IDS

db:NVDid:CVE-2021-37063

Trust: 3.3

db:JVNDBid:JVNDB-2021-016037

Trust: 0.8

db:CNNVDid:CNNVD-202109-2059

Trust: 0.6

db:VULHUBid:VHN-398897

Trust: 0.1

sources: VULHUB: VHN-398897 // JVNDB: JVNDB-2021-016037 // CNNVD: CNNVD-202109-2059 // NVD: CVE-2021-37063

REFERENCES

url:https://device.harmonyos.com/en/docs/security/update/security-bulletins-202109-0000001196270727

Trust: 1.7

url:https://nvd.nist.gov/vuln/detail/cve-2021-37063

Trust: 1.4

url:https://device.harmonyos.com/cn/docs/security/update/security-bulletins-202109-0000001196270727

Trust: 0.6

sources: VULHUB: VHN-398897 // JVNDB: JVNDB-2021-016037 // CNNVD: CNNVD-202109-2059 // NVD: CVE-2021-37063

SOURCES

db:VULHUBid:VHN-398897
db:JVNDBid:JVNDB-2021-016037
db:CNNVDid:CNNVD-202109-2059
db:NVDid:CVE-2021-37063

LAST UPDATE DATE

2024-08-14T14:55:44.455000+00:00


SOURCES UPDATE DATE

db:VULHUBid:VHN-398897date:2021-12-09T00:00:00
db:JVNDBid:JVNDB-2021-016037date:2022-12-05T07:21:00
db:CNNVDid:CNNVD-202109-2059date:2021-12-14T00:00:00
db:NVDid:CVE-2021-37063date:2021-12-09T17:39:50.060

SOURCES RELEASE DATE

db:VULHUBid:VHN-398897date:2021-12-07T00:00:00
db:JVNDBid:JVNDB-2021-016037date:2022-12-05T00:00:00
db:CNNVDid:CNNVD-202109-2059date:2021-09-05T00:00:00
db:NVDid:CVE-2021-37063date:2021-12-07T17:15:08.717