CVE-2021-37112

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

Hisuite module has a External Control of System or Configuration Setting vulnerability.Successful exploitation of this vulnerability may lead to Firmware leak.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Weakness enumeration

CWE-668

Affected software

No affected versions have been published.

Timeline

Published
Jan 3, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-371137.5There is a Privilege escalation vulnerability with the file system component in Smartphone.Successful exploitation of this vulnerability mayCVE-2021-371145.3There is an Out-of-bounds read vulnerability in Smartphone.Successful exploitation of this vulnerability may affect service confidentiality.CVE-2021-371155.5There is an unauthorized rewriting vulnerability with the memory access management module on ACPU.Successful exploitation of this vulnerabilCVE-2021-371169.1PCManager has a Weaknesses Introduced During Design vulnerability .Successful exploitation of this vulnerability may cause that the PIN of tCVE-2021-371177.5There is a Service logic vulnerability in Smartphone.Successful exploitation of this vulnerability may cause WLAN DoS.CVE-2021-371185.3The HwNearbyMain module has a Improper Handling of Exceptional Conditions vulnerability.Successful exploitation of this vulnerability may leCVE-2021-371197.5There is a Service logic vulnerability in Smartphone.Successful exploitation of this vulnerability may cause WLAN DoS.CVE-2021-37127.4ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a fiCVE-2021-371209.8There is a Double free vulnerability in Smartphone.Successful exploitation of this vulnerability may cause a kernel crash or privilege escalCVE-2021-371219.8There is a Configuration defects in Smartphone.Successful exploitation of this vulnerability may elevate the MEID (IMEI) permission.CVE-2021-371226.5There is a use-after-free (UAF) vulnerability in Huawei products. An attacker may craft specific packets to exploit this vulnerability. SuccCVE-2021-371239.8There is an improper authentication vulnerability in Hero-CT060 before 1.0.0.200. The vulnerability is due to that when an user wants to do