CVE-2021-46787

{"containers": {"cna": {"affected": [{"product": "HarmonyOS", "vendor": "Huawei", "versions": [{"status": "affected", "version": "2.0"}]}, {"product": "EMUI", "vendor": "Huawei", "versions": [{"status": "affected", "version": "12.0.0"}, {"status": "affected", "version": "11.0.1"}, {"status": "affected", "version": "11.0.0"}, {"status": "affected", "version": "10.1.1"}, {"status": "affected", "version": "10.1.0"}]}, {"product": "Magic UI", "vendor": "Huawei", "versions": [{"status": "affected", "version": "4.0.0"}, {"status": "affected", "version": "3.1.1"}, {"status": "affected", "version": "3.1.0"}]}], "descriptions": [{"lang": "en", "value": "The AMS module has a vulnerability of improper permission control.Successful exploitation of this vulnerability may cause non-system application processes to crash."}], "problemTypes": [{"descriptions": [{"description": "Improper permission control vulnerability", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2022-05-13T15:02:34.000Z", "orgId": "25ac1063-e409-4190-8079-24548c77ea2e", "shortName": "huawei"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://consumer.huawei.com/en/support/bulletin/2022/5/"}, {"tags": ["x_refsource_MISC"], "url": "https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202205-0000001245813162"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "psirt@huawei.com", "ID": "CVE-2021-46787", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "HarmonyOS", "version": {"version_data": [{"version_affected": "=", "version_value": "2.0"}]}}, {"product_name": "EMUI", "version": {"version_data": [{"version_affected": "=", "version_value": "12.0.0"}, {"version_affected": "=", "version_value": "11.0.1"}, {"version_affected": "=", "version_value": "11.0.0"}, {"version_affected": "=", "version_value": "10.1.1"}, {"version_affected": "=", "version_value": "10.1.0"}]}}, {"product_name": "Magic UI", "version": {"version_data": [{"version_affected": "=", "version_value": "4.0.0"}, {"version_affected": "=", "version_value": "3.1.1"}, {"version_affected": "=", "version_value": "3.1.0"}]}}]}, "vendor_name": "Huawei"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The AMS module has a vulnerability of improper permission control.Successful exploitation of this vulnerability may cause non-system application processes to crash."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Improper permission control vulnerability"}]}]}, "references": {"reference_data": [{"name": "https://consumer.huawei.com/en/support/bulletin/2022/5/", "refsource": "MISC", "url": "https://consumer.huawei.com/en/support/bulletin/2022/5/"}, {"name": "https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202205-0000001245813162", "refsource": "MISC", "url": "https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202205-0000001245813162"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-04T05:17:42.364Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://consumer.huawei.com/en/support/bulletin/2022/5/"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202205-0000001245813162"}]}]}, "cveMetadata": {"assignerOrgId": "25ac1063-e409-4190-8079-24548c77ea2e", "assignerShortName": "huawei", "cveId": "CVE-2021-46787", "datePublished": "2022-05-13T15:02:34.000Z", "dateReserved": "2022-04-25T00:00:00.000Z", "dateUpdated": "2024-08-04T05:17:42.364Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"affected": [{"affectedData": [{"product": "HarmonyOS", "vendor": "Huawei", "versions": [{"status": "affected", "version": "2.0"}]}, {"product": "EMUI", "vendor": "Huawei", "versions": [{"status": "affected", "version": "12.0.0"}, {"status": "affected", "version": "11.0.1"}, {"status": "affected", "version": "11.0.0"}, {"status": "affected", "version": "10.1.1"}, {"status": "affected", "version": "10.1.0"}]}, {"product": "Magic UI", "vendor": "Huawei", "versions": [{"status": "affected", "version": "4.0.0"}, {"status": "affected", "version": "3.1.1"}, {"status": "affected", "version": "3.1.0"}]}], "source": "psirt@huawei.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:huawei:emui:10.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "66AC7F91-917C-40A6-9983-A339EFB091F1", "vulnerable": true}, {"criteria": "cpe:2.3:o:huawei:emui:10.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "A7FF0AD1-22C2-423B-822A-E6496CEDAB02", "vulnerable": true}, {"criteria": "cpe:2.3:o:huawei:emui:11.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "0B701EC6-8208-4D22-95A6-B07D471A8A8B", "vulnerable": true}, {"criteria": "cpe:2.3:o:huawei:emui:11.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "511F8CE2-C2B6-4A08-B992-49D9B75B8655", "vulnerable": true}, {"criteria": "cpe:2.3:o:huawei:emui:12.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "A974CA73-84E8-480B-BB4C-4A81D0C985B2", "vulnerable": true}, {"criteria": "cpe:2.3:o:huawei:magic_ui:3.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "EFAE846A-00EA-417F-B66F-1F5396BB6139", "vulnerable": true}, {"criteria": "cpe:2.3:o:huawei:magic_ui:3.1.1:*:*:*:*:*:*:*", "matchCriteriaId": "B655712B-E86C-4BD2-8A99-AEA382C520E7", "vulnerable": true}, {"criteria": "cpe:2.3:o:huawei:magic_ui:4.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "F6066FAB-23F5-4CB2-B89E-B00F8835AC39", "vulnerable": true}], "negate": false, "operator": "OR"}]}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:huawei:harmonyos:2.0:*:*:*:*:*:*:*", "matchCriteriaId": "3AD62E8B-CB4B-43A6-98E8-09A8A1A3505B", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The AMS module has a vulnerability of improper permission control.Successful exploitation of this vulnerability may cause non-system application processes to crash."}, {"lang": "es", "value": "El m\u00f3dulo AMS presenta una vulnerabilidad de control de permisos inapropiada. Una explotaci\u00f3n con \u00e9xito de esta vulnerabilidad puede causar que los procesos de aplicaciones no relacionadas con el sistema sean bloqueados"}], "id": "CVE-2021-46787", "lastModified": "2026-06-17T04:15:34.387", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 5.0, "confidentialityImpact": "NONE", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-05-13T15:15:08.523", "references": [{"source": "psirt@huawei.com", "tags": ["Vendor Advisory"], "url": "https://consumer.huawei.com/en/support/bulletin/2022/5/"}, {"source": "psirt@huawei.com", "tags": ["Vendor Advisory"], "url": "https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202205-0000001245813162"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://consumer.huawei.com/en/support/bulletin/2022/5/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202205-0000001245813162"}], "sourceIdentifier": "psirt@huawei.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{}