ByteOS

Product

EMUI

Versions

Affected

11.0.0
10.1.1

Vendor

Product

Magic UI

Versions

Affected

4.0.0
3.1.1

Problem Types

Type	CWE ID	Description
text	N/A	Input Verification Vulnerability

Type: text

CWE ID: N/A

Description: Input Verification Vulnerability

References

Hyperlink	Resource
https://consumer.huawei.com/en/support/bulletin/2021/7/	x_refsource_MISC

Hyperlink: https://consumer.huawei.com/en/support/bulletin/2021/7/

Resource:

x_refsource_MISC

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://consumer.huawei.com/en/support/bulletin/2021/7/	x_refsource_MISC x_transferred

Hyperlink: https://consumer.huawei.com/en/support/bulletin/2021/7/

Resource:

x_refsource_MISC

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:psirt@huawei.com

Published At:28 Oct, 2021 | 13:15

Updated At:01 Nov, 2021 | 23:14

There is a Parameter verification issue in Huawei Smartphone.Successful exploitation of this vulnerability can affect service integrity.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Primary	2.0	5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:P/A:N

Type: Primary

Version: 3.1

Base score: 7.5

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Type: Primary

Version: 2.0

Base score: 5.0

Base severity: MEDIUM

Vector:

AV:N/AC:L/Au:N/C:N/I:P/A:N

CPE Matches

cpe:2.3:o:huawei:emui:10.1.1:*:*:*:*:*:*:*

>>emui>>10.1.1

cpe:2.3:o:huawei:emui:11.0.0:*:*:*:*:*:*:*

>>emui>>11.0.0

cpe:2.3:o:huawei:magic_ui:3.1.1:*:*:*:*:*:*:*

>>magic_ui>>3.1.1

cpe:2.3:o:huawei:magic_ui:4.0.0:*:*:*:*:*:*:*

>>magic_ui>>4.0.0

Weaknesses

CWE ID	Type	Source
NVD-CWE-noinfo	Primary	nvd@nist.gov

CWE ID: NVD-CWE-noinfo

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://consumer.huawei.com/en/support/bulletin/2021/7/	psirt@huawei.com	Vendor Advisory

Hyperlink: https://consumer.huawei.com/en/support/bulletin/2021/7/

Source: psirt@huawei.com

Resource:

Vendor Advisory

Similar CVEs

61Records found

CVE-2023-39392

Matching Score-8

Assigner-Huawei Technologies

Matching Score-8

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.03% / 5.84%

7 Day CHG~0.00%

Published-13 Aug, 2023 | 11:33

Updated-10 Oct, 2024 | 14:31

Vulnerability of insecure signatures in the OsuLogin module. Successful exploitation of this vulnerability may cause OsuLogin to be maliciously modified and overwritten.

Product-emui harmonyos HarmonyOS EMUI

CWE ID-CWE-16

Not Available

CWE ID-CWE-347

Improper Verification of Cryptographic Signature

CVE-2023-39393

Matching Score-8

Assigner-Huawei Technologies

Matching Score-8

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.03% / 5.84%

7 Day CHG~0.00%

Published-13 Aug, 2023 | 11:34

Updated-10 Oct, 2024 | 14:30

Vulnerability of insecure signatures in the ServiceWifiResources module. Successful exploitation of this vulnerability may cause ServiceWifiResources to be maliciously modified and overwritten.

Product-emui harmonyos HarmonyOS EMUI

CWE ID-CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

CWE ID-CWE-347

Improper Verification of Cryptographic Signature

CVE-2021-37048

Matching Score-8

Assigner-Huawei Technologies

Matching Score-8

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.11% / 30.49%

7 Day CHG~0.00%

Published-07 Dec, 2021 | 16:02

Updated-04 Aug, 2024 | 01:09

There is a Improper Input Validation vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to fake visitors to control PC,play a video,etc.

Product-harmonyos HarmonyOS

CWE ID-CWE-20

Improper Input Validation

CVE-2023-1695

Matching Score-8

Assigner-Huawei Technologies

Matching Score-8

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.07% / 20.51%

7 Day CHG~0.00%

Published-06 Jul, 2023 | 12:51

Updated-27 Nov, 2024 | 15:22

Vulnerability of failures to capture exceptions in the communication framework. Successful exploitation of this vulnerability may cause features to perform abnormally.

Product-emui harmonyos HarmonyOS EMUI

CWE ID-CWE-755

Improper Handling of Exceptional Conditions

CVE-2021-36995

Matching Score-8

Assigner-Huawei Technologies

Matching Score-8

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.17% / 38.02%

7 Day CHG~0.00%

Published-28 Oct, 2021 | 12:27

Updated-04 Aug, 2024 | 01:09

There is an Unauthorized file access vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability by modifying soft links may tamper with the files restored from backups.

Product-magic_ui emui Magic UI EMUI

CVE-2016-7107

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-7.5||HIGH

EPSS-0.16% / 37.16%

7 Day CHG~0.00%

Published-07 Sep, 2016 | 19:00

Updated-12 Apr, 2025 | 10:46

Huawei Unified Maintenance Audit (UMA) before V200R001C00SPC200 SPH206 allows remote attackers to reset arbitrary user passwords and consequently affect system data integrity via unspecified vectors.

Vendor-n/a Huawei Technologies Co., Ltd.

Product-uma n/a

CWE ID-CWE-284

Improper Access Control

CVE-2016-5231

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-7.8||HIGH

EPSS-0.10% / 27.91%

7 Day CHG~0.00%

Published-30 Jun, 2016 | 16:00

Updated-12 Apr, 2025 | 10:46

Huawei Mate8 NXT-AL before NXT-AL10C00B182, NXT-CL before NXT-CL00C92B182, NXT-DL before NXT-DL00C17B182, and NXT-TL before NXT-TL00C01B182 allows attackers to bypass permission checks and delete user data via a crafted app.

Vendor-n/a Huawei Technologies Co., Ltd.

Product-mate_8 mate_8_firmware n/a

CVE-2016-5366

Matching Score-8

Assigner-MITRE Corporation

Matching Score-8

Assigner-MITRE Corporation

CVSS Score-7.5||HIGH

EPSS-0.10% / 29.19%

7 Day CHG~0.00%

Published-14 Jun, 2016 | 14:00

Updated-12 Apr, 2025 | 10:46

Huawei Honor WS851 routers with software 1.1.21.1 and earlier allow remote attackers to modify configuration data via vectors related to a "file injection vulnerability," aka HWPSIRT-2016-05052.

Vendor-n/a Huawei Technologies Co., Ltd.

Product-honor_ws851_firmware honor_ws851 n/a

CWE ID-CWE-284

Improper Access Control

CVE-2022-41583

Matching Score-8

Assigner-Huawei Technologies

Matching Score-8

Assigner-Huawei Technologies

CVSS Score-7.5||HIGH

EPSS-0.08% / 23.54%

7 Day CHG~0.00%

Published-14 Oct, 2022 | 00:00

Updated-14 May, 2025 | 15:15

The storage maintenance and debugging module has an array out-of-bounds read vulnerability.Successful exploitation of this vulnerability will cause incorrect statistics of this module.

Product-harmonyos emui HarmonyOS EMUI

CWE ID-CWE-125

Out-of-bounds Read

CVE-2021-37058

Matching Score-8

Assigner-Huawei Technologies

Matching Score-8

Assigner-Huawei Technologies

CVSS Score-5.3||MEDIUM

EPSS-0.10% / 28.22%

7 Day CHG~0.00%

Published-07 Dec, 2021 | 16:02

Updated-04 Aug, 2024 | 01:09

There is a Permissions,Privileges,and Access Controls vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to the user's nickname is maliciously tampered with.

Product-harmonyos HarmonyOS

CVE-2021-37112

Matching Score-8

Assigner-Huawei Technologies

Matching Score-8

Assigner-Huawei Technologies

CVSS Score-5.3||MEDIUM

EPSS-0.11% / 30.49%

7 Day CHG~0.00%

Published-03 Jan, 2022 | 21:07

Updated-04 Aug, 2024 | 01:09

Hisuite module has a External Control of System or Configuration Setting vulnerability.Successful exploitation of this vulnerability may lead to Firmware leak.