Details of VAR-202202-0767

ID

VAR-202202-0767

CVE

CVE-2021-22448

TITLE

EMUI and Magic UI Vulnerability in

Trust: 0.8

sources: JVNDB: JVNDB-2022-006298

DESCRIPTION

There is an improper verification vulnerability in smartphones. Successful exploitation of this vulnerability may cause unauthorized read and write of some files. EMUI and Magic UI Exists in unspecified vulnerabilities.Information may be obtained and information may be tampered with

Trust: 1.71

sources: NVD: CVE-2021-22448 // JVNDB: JVNDB-2022-006298 // VULHUB: VHN-380883

AFFECTED PRODUCTS

vendor:	huawei	model:	magic ui	scope:	eq	version:	3.1.0	Trust: 1.0
vendor:	huawei	model:	emui	scope:	eq	version:	9.1.0	Trust: 1.0
vendor:	huawei	model:	magic ui	scope:	eq	version:	2.1.1	Trust: 1.0
vendor:	huawei	model:	emui	scope:	eq	version:	9.1.1	Trust: 1.0
vendor:	huawei	model:	magic ui	scope:	eq	version:	3.0.0	Trust: 1.0
vendor:	huawei	model:	emui	scope:	eq	version:	10.1.0	Trust: 1.0
vendor:	huawei	model:	emui	scope:	eq	version:	11.0.0	Trust: 1.0
vendor:	huawei	model:	emui	scope:	eq	version:	10.0.0	Trust: 1.0
vendor:	huawei	model:	magic ui	scope:	eq	version:	4.0.0	Trust: 1.0
vendor:	huawei	model:	magic ui	scope:	eq	version:	3.1.1	Trust: 1.0
vendor:	huawei	model:	emui	scope:	eq	version:	10.1.1	Trust: 1.0
vendor:	huawei	model:	emui	scope:	-	version:	-	Trust: 0.8
vendor:	huawei	model:	magic ui	scope:	-	version:	-	Trust: 0.8

sources: JVNDB: JVNDB-2022-006298 // NVD: CVE-2021-22448

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov:	CVE-2021-22448
value:	CRITICAL
Trust: 1.0
NVD:	CVE-2021-22448
value:	CRITICAL
Trust: 0.8
CNNVD:	CNNVD-202202-2073
value:	CRITICAL
Trust: 0.6
VULHUB:	VHN-380883
value:	MEDIUM
Trust: 0.1

nvd@nist.gov:	CVE-2021-22448
severity:	MEDIUM
baseScore:	6.4
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:N
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	NONE
exploitabilityScore:	10.0
impactScore:	4.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 1.8
VULHUB:	VHN-380883
severity:	MEDIUM
baseScore:	6.4
vectorString:	AV:N/AC:L/AU:N/C:P/I:P/A:N
accessVector:	NETWORK
accessComplexity:	LOW
authentication:	NONE
confidentialityImpact:	PARTIAL
integrityImpact:	PARTIAL
availabilityImpact:	NONE
exploitabilityScore:	10.0
impactScore:	4.9
acInsufInfo:	NONE
obtainAllPrivilege:	NONE
obtainUserPrivilege:	NONE
obtainOtherPrivilege:	NONE
userInteractionRequired:	NONE
version:	2.0
Trust: 0.1

nvd@nist.gov:	CVE-2021-22448
baseSeverity:	CRITICAL
baseScore:	9.1
vectorString:	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	NONE
exploitabilityScore:	3.9
impactScore:	5.2
version:	3.1
Trust: 1.0
NVD:	CVE-2021-22448
baseSeverity:	CRITICAL
baseScore:	9.1
vectorString:	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
attackVector:	NETWORK
attackComplexity:	LOW
privilegesRequired:	NONE
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	HIGH
availabilityImpact:	NONE
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: VULHUB: VHN-380883 // JVNDB: JVNDB-2022-006298 // CNNVD: CNNVD-202202-2073 // NVD: CVE-2021-22448

PROBLEMTYPE DATA

problemtype:	NVD-CWE-noinfo	Trust: 1.0
problemtype:	Lack of information (CWE-noinfo) [NVD evaluation ]	Trust: 0.8
problemtype:	CWE-862	Trust: 0.1

sources: VULHUB: VHN-380883 // JVNDB: JVNDB-2022-006298 // NVD: CVE-2021-22448

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-202202-2073

TYPE

other

Trust: 0.6

sources: CNNVD: CNNVD-202202-2073

PATCH

title:	HUAWEI EMUI/Magic UI security updates June 2021	url:	https://consumer.huawei.com/en/support/bulletin/2021/6/	Trust: 0.8
title:	HUAWEI EMUI Security vulnerabilities	url:	http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=185118	Trust: 0.6

sources: JVNDB: JVNDB-2022-006298 // CNNVD: CNNVD-202202-2073

EXTERNAL IDS

db:	NVD	id:	CVE-2021-22448	Trust: 3.3
db:	JVNDB	id:	JVNDB-2022-006298	Trust: 0.8
db:	CNNVD	id:	CNNVD-202202-2073	Trust: 0.6
db:	VULHUB	id:	VHN-380883	Trust: 0.1

sources: VULHUB: VHN-380883 // JVNDB: JVNDB-2022-006298 // CNNVD: CNNVD-202202-2073 // NVD: CVE-2021-22448

REFERENCES

url:	https://consumer.huawei.com/en/support/bulletin/2021/6/	Trust: 1.7
url:	https://nvd.nist.gov/vuln/detail/cve-2021-22448	Trust: 0.8
url:	https://cxsecurity.com/cveshow/cve-2021-22448/	Trust: 0.6

sources: VULHUB: VHN-380883 // JVNDB: JVNDB-2022-006298 // CNNVD: CNNVD-202202-2073 // NVD: CVE-2021-22448

SOURCES

db:	VULHUB	id:	VHN-380883
db:	JVNDB	id:	JVNDB-2022-006298
db:	CNNVD	id:	CNNVD-202202-2073
db:	NVD	id:	CVE-2021-22448

LAST UPDATE DATE

2024-08-14T13:53:34.669000+00:00

SOURCES UPDATE DATE

db:	VULHUB	id:	VHN-380883	date:	2022-07-12T00:00:00
db:	JVNDB	id:	JVNDB-2022-006298	date:	2023-07-04T02:03:00
db:	CNNVD	id:	CNNVD-202202-2073	date:	2022-07-14T00:00:00
db:	NVD	id:	CVE-2021-22448	date:	2022-07-12T17:42:04.277

SOURCES RELEASE DATE

db:	VULHUB	id:	VHN-380883	date:	2022-02-25T00:00:00
db:	JVNDB	id:	JVNDB-2022-006298	date:	2023-07-04T00:00:00
db:	CNNVD	id:	CNNVD-202202-2073	date:	2022-02-25T00:00:00
db:	NVD	id:	CVE-2021-22448	date:	2022-02-25T19:15:10.770