CVE-2021-40049

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

There is a permission control vulnerability in the PMS module. Successful exploitation of this vulnerability can lead to sensitive system information being obtained without authorization.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-276

Affected software

VendorProductVersions
HuaweiEMUI12.0.0; 11.0.0; 10.1.1; 10.1.0
HuaweiMagic UI4.0.0; 3.1.1; 3.1.0
HuaweiHarmonyOS2.0

References

Timeline

Published
Mar 10, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-40054.3firefly-iii is vulnerable to Cross-Site Request Forgery (CSRF)CVE-2021-400509.8There is an out-of-bounds read vulnerability in the IFAA module. Successful exploitation of this vulnerability may cause stack overflow.CVE-2021-400517.5There is an unauthorized access vulnerability in system components. Successful exploitation of this vulnerability will affect confidentialitCVE-2021-400527.5There is an incorrect buffer size calculation vulnerability in the video framework.Successful exploitation of this vulnerability may affect CVE-2021-400539.1There is a permission control vulnerability in the Nearby module.Successful exploitation of this vulnerability will affect availability and CVE-2021-400547.5There is an integer underflow vulnerability in the atcmdserver module. Successful exploitation of this vulnerability may affect integrity.CVE-2021-400555.9There is a man-in-the-middle attack vulnerability during system update download in recovery mode. Successful exploitation of this vulnerabilCVE-2021-400567.5There is a vulnerability of copying input buffer without checking its size in the video framework. Successful exploitation of this vulnerabiCVE-2021-400577.5There is a heap-based and stack-based buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability maCVE-2021-400587.5There is a heap-based buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability may affect availabCVE-2021-400596.5There is a permission control vulnerability in the Wi-Fi module. Successful exploitation of this vulnerability may affect confidentiality.CVE-2021-400607.5There is a heap-based buffer overflow vulnerability in the video framework. Successful exploitation of this vulnerability may affect availab
CVE-2021-40049: High severity, CVSS 7.5 | Vulnix