CVEvulnerability

CVE-2021-22398

4.6 MEDIUM Published 2021-08-02 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-08-02
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
4.6 MEDIUM — CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:N/I:P/A:N
Weaknesses
CWE-863

Description

There is a logic error vulnerability in several smartphones. The software does not properly restrict certain operation when the Digital Balance function is on. Successful exploit could allow the attacker to bypass the Digital Balance limit after a series of operations. Affected product versions include: Hulk-AL00C 9.1.1.201(C00E201R8P1);Jennifer-AN00C 10.1.1.171(C00E170R6P3);Jenny-AL10B 10.1.0.228(C00E220R5P1) and OxfordPL-AN10B 10.1.0.116(C00E110R2P1).

Affected configurations

• huawei hulk-al00c firmware 9.1.1.201\(c00e201r8p1\) • huawei jennifer-an00c firmware 10.1.1.171\(c00e170r6p3\) • huawei jenny-al10b firmware 10.1.0.228\(c00e220r5p1\) • huawei oxfordpl-an10b firmware 10.1.0.116\(c00e110r2p1\)

Related

Weakness · CWE (1)

  • CWE-863 Incorrect Authorization weakness

References