CVE-2021-40037

There is a Vulnerability of accessing resources using an incompatible type (type confusion) in the MPTCP subsystem in smartphones. Successful exploitation of this vulnerability may cause the system to crash and restart.

CVSS v3 5.5 MEDIUM
CVSS v2.0 4.9 MEDIUM

5.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact HIGH

Scope UNCHANGED

4.9^/10

CVSS v2.0 : MEDIUM

Vector : AV:L/AC:L/Au:N/C:N/I:N/A:C

Exploitability : 3.9 / Impact : 6.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact COMPLETE

References

Link	Resource
https://consumer.huawei.com/en/support/bulletin/2022/1/	Vendor Advisory
https://device.harmonyos.com/en/docs/security/update/security-bulletins-202201-0000001238736331	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:o:huawei:harmonyos:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR	cpe:2.3:o:huawei:emui:10.0.0:::::::*
	cpe:2.3:o:huawei:emui:10.1.0:::::::*
	cpe:2.3:o:huawei:emui:10.1.1:::::::*
	cpe:2.3:o:huawei:emui:11.0.0:::::::*
	cpe:2.3:o:huawei:emui:11.0.1:::::::*
	cpe:2.3:o:huawei:emui:12.0.0:::::::*
	cpe:2.3:o:huawei:magic_ui:3.0.0:::::::*
	cpe:2.3:o:huawei:magic_ui:3.1.0:::::::*
	cpe:2.3:o:huawei:magic_ui:3.1.1:::::::*
	cpe:2.3:o:huawei:magic_ui:4.0.0:::::::*

History

No history.

Information

Published : 2022-01-10 14:10

Updated : 2024-02-28 18:48

NVD link : CVE-2021-40037

Mitre link : CVE-2021-40037

CVE.ORG link : CVE-2021-40037

JSON object : View

Products Affected

huawei

harmonyos
emui
magic_ui

CWE

CWE-843

Access of Resource Using Incompatible Type ('Type Confusion')

{"id": "CVE-2021-40037", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.9, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:N/I:N/A:C", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 6.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.5, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.8}]}, "published": "2022-01-10T14:10:22.520", "references": [{"url": "https://consumer.huawei.com/en/support/bulletin/2022/1/", "tags": ["Vendor Advisory"], "source": "psirt@huawei.com"}, {"url": "https://device.harmonyos.com/en/docs/security/update/security-bulletins-202201-0000001238736331", "tags": ["Vendor Advisory"], "source": "psirt@huawei.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-843"}]}], "descriptions": [{"lang": "en", "value": "There is a Vulnerability of accessing resources using an incompatible type (type confusion) in the MPTCP subsystem in smartphones. Successful exploitation of this vulnerability may cause the system to crash and restart."}, {"lang": "es", "value": "Se presenta una vulnerabilidad de acceso a recursos usando un tipo no compatible (confusi\u00f3n de tipos) en el subsistema MPTCP en los smartphones. Una explotaci\u00f3n con \u00e9xito de esta vulnerabilidad puede causar el bloqueo y el reinicio del sistema"}], "lastModified": "2022-01-13T15:33:36.160", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:huawei:harmonyos:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "84A0CF45-FF48-42DF-9063-34AB6CA4FE12", "versionEndExcluding": "2.0"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:huawei:emui:10.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "504F2E73-FFD0-4589-8644-FE77656BB28D"}, {"criteria": "cpe:2.3:o:huawei:emui:10.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "66AC7F91-917C-40A6-9983-A339EFB091F1"}, {"criteria": "cpe:2.3:o:huawei:emui:10.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A7FF0AD1-22C2-423B-822A-E6496CEDAB02"}, {"criteria": "cpe:2.3:o:huawei:emui:11.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0B701EC6-8208-4D22-95A6-B07D471A8A8B"}, {"criteria": "cpe:2.3:o:huawei:emui:11.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "511F8CE2-C2B6-4A08-B992-49D9B75B8655"}, {"criteria": "cpe:2.3:o:huawei:emui:12.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A974CA73-84E8-480B-BB4C-4A81D0C985B2"}, {"criteria": "cpe:2.3:o:huawei:magic_ui:3.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8A7A4346-1757-48F9-827C-13EABC357302"}, {"criteria": "cpe:2.3:o:huawei:magic_ui:3.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EFAE846A-00EA-417F-B66F-1F5396BB6139"}, {"criteria": "cpe:2.3:o:huawei:magic_ui:3.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B655712B-E86C-4BD2-8A99-AEA382C520E7"}, {"criteria": "cpe:2.3:o:huawei:magic_ui:4.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F6066FAB-23F5-4CB2-B89E-B00F8835AC39"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@huawei.com"}