CVE-2021-37099

There is a Path Traversal vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to delete any file

published December 7, 2021

CVSS
—
EPSS
1%
Percentile
56.1
In the wild
Unconfirmed
What it is

⚠️ A sneaky path traversal vulnerability in Huawei smartphones could let an attacker delete any file on the device, making your precious data vanish into thin air! Think of it like a delivery driver that follows a poorly written address and accidentally dumps a whole shipment of valuable items into the wrong trash can — it’s a disaster waiting to happen! 📦 If exploited, an attacker could clear out any files they target, potentially wiping out critical personal data or even system files. Imagine losing your contacts, photos, or even worse, your favorite apps in a single sweep!

Put simply

Think of it like a delivery driver that follows a poorly written address and accidentally dumps a whole shipment of valuable items into the wrong trash can — it’s a disaster waiting to happen! 📦 This path traversal vulnerability allows attackers to manipulate file paths, enabling them to access and delete files on the device that should be off-limits. It happens when the application fails to adequately sanitize input paths, creating an open door for mischief.

What to do

If exploited, an attacker could clear out any files they target, potentially wiping out critical personal data or even system files. Imagine losing your contacts, photos, or even worse, your favorite apps in a single sweep! To protect your device, ensure you have the latest firmware updates installed from Huawei. Regularly check for security patches and consider reviewing your app permissions to limit exposure. You've got this! Stay proactive and keep your device secure! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00799 · 56.1th percentile
Published
2021-12-07T16:06Z
EPSS history
Timeline
  • 07 DEC 16:06Z
    There is a Path Traversal vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to delete any file
    cvelistv5