CVE-2021-40045

EPSS 0.2%

Vexday Risk Score

3Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS —EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

09 fev 2022Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

There is a vulnerability of signature verification mechanism failure in system upgrade through recovery mode.Successful exploitation of this vulnerability may affect service confidentiality.

Produtos afetados

Huawei · EMUI Huawei · HarmonyOS Huawei · Magic UI

Referências

https://consumer.huawei.com/en/support/bulletin/2022/2/https://device.harmonyos.com/en/docs/security/update/security-bulletins-202202-0000001204253396