CVE-2021-37101

MediumCVSS 6.8/10Last modified Jun 17, 2026

Description

There is an improper authorization vulnerability in AIS-BW50-00 9.0.6.2(H100SP10C00) and 9.0.6.2(H100SP15C00). Due to improper authorization mangement, an attakcer can exploit this vulnerability by physical accessing the device and implant malicious code. Successfully exploit could leads to arbitrary code execution in the target device.

Metrics

CVSS 3.1 6.8/10CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
Sep 9, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-371028.8There is a command injection vulnerability in CMA service module of FusionCompute product when processing the default certificate file. The CVE-2021-371035.5There is an improper permission management vulnerability in the Wallet apps. Successful exploitation of this vulnerability may affect servicCVE-2021-371047.5There is a server-side request forgery vulnerability in HUAWEI P40 versions 10.1.0.118(C00E116R3P3). This vulnerability is due to insufficieCVE-2021-371057.5There is an improper file upload control vulnerability in FusionCompute 6.5.0, 6.5.1 and 8.0.0. Due to the improper verification of file to CVE-2021-371067.2There is a command injection vulnerability in CMA service module of FusionCompute 6.3.0, 6.3.1, 6.5.0 and 8.0.0 when processing the default CVE-2021-371075.5There is an improper memory access permission configuration on ACPU.Successful exploitation of this vulnerability may cause out-of-bounds acCVE-2021-371097.8There is a security protection bypass vulnerability with the modem.Successful exploitation of this vulnerability may cause memory protectionCVE-2021-37119.8In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an application willCVE-2021-371107.5There is a Timing design defects in Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.CVE-2021-371117.5There is a Memory leakage vulnerability in Smartphone.Successful exploitation of this vulnerability may cause memory exhaustion.CVE-2021-371125.3Hisuite module has a External Control of System or Configuration Setting vulnerability.Successful exploitation of this vulnerability may leaCVE-2021-371137.5There is a Privilege escalation vulnerability with the file system component in Smartphone.Successful exploitation of this vulnerability may