Path traversal in Huawei products - CVE-2021-22440

Vulnerability identifier: #VU54505

CSH Severity: Low

CVSS v4: 5.1 [CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:A/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2021-22440

CWE-ID: CWE-22

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local attacker to perform directory traversal attacks.

The vulnerability exists due to input validation error when processing directory traversal sequences. An attacker with physical access can connect to the smartphone through a USB cable and access a location that is outside of the restricted directory by a crafted filename

Hima-L29C
Laya-AL00EP
Huawei Tony-AL00B
OxfordS-AN00A
Huawei Mate 20 Pro
Huawei Mate 20

Install update from vendor's website.

Hima-L29C - addressed in versions HMA-L29 11.0.0.138(C10E2R2P3), HMA-L29 11.0.0.138(C185E2R2P3), HMA-L29 11.0.0.138(C636E2R2P3)
Huawei Mate 20 Pro - addressed in versions 11.0.0.138(C185E3R1P4), 11.0.0.138(C432E4R1P4), 11.0.0.138(C10E3R2P4), 11.0.0.138(C185E3R2P4), 11.0.0.138(C636E3R2P4), 11.0.0.141(C635E5R1P4)
Huawei Mate 20 - addressed in versions 11.0.0.130(C01E125R2P6), 11.0.0.130(C00E125R3P6)
Laya-AL00EP - update to 11.0.0.130(C786E125R3P6)
Huawei Tony-AL00B - update to 11.0.0.130(C00E125R2P5)
OxfordS-AN00A - update to OXF-AN00 11.0.0.165(C00E165R5P5)

• https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20210630-01-pathtraversal-en

• Path traversal in Some Huawei Products