Vulnerabilities > CVE-2021-22385 - Exposure of Resource to Wrong Sphere vulnerability in Huawei Emui and Magic UI
Attack vector
LOCAL Attack complexity
LOW Privileges required
LOW Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
A component of the Huawei smartphone has a External Control of System or Configuration Setting vulnerability. Local attackers may exploit this vulnerability to cause Kernel Code Execution.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
OS | 6 |
Common Weakness Enumeration (CWE)
References
- https://consumer.huawei.com/en/support/bulletin/2021/6/
- https://consumer.huawei.com/en/support/bulletin/2021/6/
- https://device.harmonyos.com/cn/docs/security/update/oem_security_update_phone_202106-0000001165452077
- https://device.harmonyos.com/cn/docs/security/update/oem_security_update_phone_202106-0000001165452077