CVE-2021-37000
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2021-37000
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Some Huawei wearables have a permission management vulnerability.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
凭证管理
Source: NVD (National Vulnerability Database)
Vulnerability Title
Huawei HarmonyOS Wearables安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Huawei HarmonyOS Wearables是中国华为（Huawei）公司的华为的一款电子手表。 Huawei HarmonyOS Wearables 华为部分穿戴产品存在权限管理不当漏洞。成功利用这个漏洞可能导致机密性受影响。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2021-37000
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2021-37000
请登录查看更多情报信息。
Same Patch Batch · Huawei · 2024-12-28 · 11 CVEs total
| CVE-2023-7266 | 7.5 HIGH | Huawei WS7200-10 安全漏洞 |
| CVE-2023-7263 | 7.3 HIGH | Huawei HarmonyOS AILife Solution 安全漏洞 |
| CVE-2023-52718 | 6.4 MEDIUM | Huawei多款产品 安全漏洞 |
| CVE-2022-48470 | 4.0 MEDIUM | 编号已被CVE保留 |
| CVE-2020-1820 | 3.7 LOW | 华为产品安全漏洞 |
| CVE-2020-1821 | 3.7 LOW | 华为产品安全漏洞 |
| CVE-2020-1822 | 3.7 LOW | 华为产品安全漏洞 |
| CVE-2020-1823 | 3.7 LOW | 华为产品安全漏洞 |
| CVE-2020-1824 | 3.7 LOW | 华为产品安全漏洞 |
| CVE-2021-22484 | Huawei HarmonyOS 安全漏洞 |
IV. Related Vulnerabilities
Same weakness: CWE-255
- CVE-2021-28509
TerminAttr streams MACsec sensitive data in clear text to ot - CVE-2021-28508
TerminAttr streams IPsec sensitive data in clear text to oth - CVE-2022-25327
Local Denial of Service in fscrypt PAM module - CVE-2020-8968
Parallels Remote Application Server credentials management e - CVE-2021-22568
Dart - Publishing to third-party package repositories may ex
V. Comments for CVE-2021-37000
No comments yet