Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

There is a Code Injection vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to system restart.

CVE-2021-37097 · published 4 years ago
Summary

There is a Code Injection vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to system restart.

What to do
  • Update huawei harmonyos to version 2.0 or later.
Affected software
VendorProductAffected versions
huawei harmonyos < 2.0
cpe:2.3:o:huawei:harmonyos:*:*:*:*:*:*:*:*
huawei emui 9.1.0
9.1.1
10.0.0
10.1.0
10.1.1
11.0.0
cpe:2.3:o:huawei:emui:9.1.0:*:*:*:*:*:*:*
huawei magic_ui 2.1.1
3.0.0
3.1.0
3.1.1
4.0.0
cpe:2.3:o:huawei:magic_ui:2.1.1:*:*:*:*:*:*:*
Original advisory text
There is a Code Injection vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to system restart.
There is a Code Injection vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to system restart.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
7.5 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-94Code Injection
Timeline
Published8 Dec 2021
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2021-37097 · NVD
Track software like this
Free during beta