CVE-2021-40043

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

The laser command injection vulnerability exists on AIS-BW80H-00 versions earlier than AIS-BW80H-00 9.0.3.4(H100SP13C00). The devices cannot effectively defend against external malicious interference. Attackers need the device to be visually exploitable and successful triggering of this vulnerability could execute voice commands on the device.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-77

Affected software

No affected versions have been published.

Timeline

Published
Feb 25, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-400448.8There is a permission verification vulnerability in the Bluetooth module.Successful exploitation of this vulnerability may cause unauthorizeCVE-2021-400455.5There is a vulnerability of signature verification mechanism failure in system upgrade through recovery mode.Successful exploitation of thisCVE-2021-400469.8PCManager versions 11.1.1.95 has a privilege escalation vulnerability. Successful exploit could allow the attacker to access certain resourcCVE-2021-400477.5There is a vulnerability of memory not being released after effective lifetime in the Bastet module. Successful exploitation of this vulneraCVE-2021-400487.5There is an incorrect buffer size calculation vulnerability in the video framework. Successful exploitation of this vulnerability will affecCVE-2021-400497.5There is a permission control vulnerability in the PMS module. Successful exploitation of this vulnerability can lead to sensitive system inCVE-2021-40054.3firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)CVE-2021-400509.8There is an out-of-bounds read vulnerability in the IFAA module. Successful exploitation of this vulnerability may cause stack overflow.CVE-2021-400517.5There is an unauthorized access vulnerability in system components. Successful exploitation of this vulnerability will affect confidentialitCVE-2021-400527.5There is an incorrect buffer size calculation vulnerability in the video framework.Successful exploitation of this vulnerability may affect CVE-2021-400539.1There is a permission control vulnerability in the Nearby module.Successful exploitation of this vulnerability will affect availability and CVE-2021-400547.5There is an integer underflow vulnerability in the atcmdserver module. Successful exploitation of this vulnerability may affect integrity.
CVE-2021-40043: High severity, CVSS 7.8 | Vulnix