CVE-2021-22403

EPSS 0.9%

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 0.9%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

28 Oct 2021Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

There is a vulnerability of hijacking unverified providers in Huawei Smartphone.Successful exploitation of this vulnerability may allow attackers to hijack the device and forge UIs to induce users to execute malicious commands.

Affected products

Huawei · EMUI Huawei · Magic UI

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://consumer.huawei.com/en/support/bulletin/2021/7/