CVE-2021-22440: There is a path traversal vulnerability in some Huawei products. The vulnerability is due to that the software uses external input to construct a path...

Description

There is a path traversal vulnerability in some Huawei products. The vulnerability is due to that the software uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the software does not properly validate the pathname. Successful exploit could allow the attacker to access a location that is outside of the restricted directory by a crafted filename. Affected product versions include:HUAWEI Mate 20 9.0.0.195(C01E195R2P1), 9.1.0.139(C00E133R3P1);HUAWEI Mate 20 Pro 9.0.0.187(C432E10R1P16), 9.0.0.188(C185E10R2P1), 9.0.0.245(C10E10R2P1), 9.0.0.266(C432E10R1P16), 9.0.0.267(C636E10R2P1), 9.0.0.268(C635E12R1P16), 9.0.0.278(C185E10R2P1); Hima-L29C 9.0.0.105(C10E9R1P16), 9.0.0.105(C185E9R1P16), 9.0.0.105(C636E9R1P16); Laya-AL00EP 9.1.0.139(C786E133R3P1); OxfordS-AN00A 10.1.0.223(C00E210R5P1); Tony-AL00B 9.1.0.257(C00E222R2P1).

Metrics

CVSS 3.1

4.6/10

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS Probability

0.21%

11.1th percentile

Probability of exploitation in the next 30 days. Learn more

Weakness Enumeration

CWE-22

Affected Software

Vendor	Product	Versions
Huawei	Mate 20 Firmware	9.0.0.195\(c01e195r2p1\)
Huawei	Mate 20 Firmware	9.1.0.139\(c00e133r3p1\)
Huawei	Mate 20 Pro Firmware	9.0.0.187\(c432e10r1p16\)
Huawei	Mate 20 Pro Firmware	9.0.0.188\(c185e10r2p1\)
Huawei	Mate 20 Pro Firmware	9.0.0.245\(c10e10r2p1\)
Huawei	Mate 20 Pro Firmware	9.0.0.266\(c432e10r1p16\)
Huawei	Mate 20 Pro Firmware	9.0.0.267\(c636e10r2p1\)
Huawei	Mate 20 Pro Firmware	9.0.0.268\(c635e12r1p16\)
Huawei	Mate 20 Pro Firmware	9.0.0.278\(c185e10r2p1\)
Huawei	Hima-L29c Firmware	9.0.0.105\(c10e9r1p16\)
Huawei	Hima-L29c Firmware	9.0.0.105\(c185e9r1p16\)
Huawei	Hima-L29c Firmware	9.0.0.105\(c636e9r1p16\)
Huawei	Laya-Al00ep Firmware	9.1.0.139\(c786e133r3p1\)
Huawei	Oxfords-An00a Firmware	10.1.0.223\(c00e210r5p1\)
Huawei	Tony-Al00b Firmware	9.1.0.257\(c00e222r2p1\)

References

Timeline

Published: Jul 13, 2021
Last Modified: Jun 17, 2026
Status: Modified

Frequently Asked Questions

What is CVE-2021-22440?

There is a path traversal vulnerability in some Huawei products. The vulnerability is due to that the software uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the software does not properly validate the pathname. Successful exploit could allow the attacker to access a location that is outside of the restricted directory by a crafted filename. Affected product versions include:HUAWEI Mate 20 9.0.0.195(C01E195R2P1), 9.1.0.139(C00E133R3P1);HUAWEI Mate 20 Pro 9.0.0.187(C432E10R1P16), 9.0.0.188(C185E10R2P1), 9.0.0.245(C10E10R2P1), 9.0.0.266(C432E10R1P16), 9.0.0.267(C636E10R2P1), 9.0.0.268(C635E12R1P16), 9.0.0.278(C185E10R2P1); Hima-L29C 9.0.0.105(C10E9R1P16), 9.0.0.105(C185E9R1P16), 9.0.0.105(C636E9R1P16); Laya-AL00EP 9.1.0.139(C786E133R3P1); OxfordS-AN00A 10.1.0.223(C00E210R5P1); Tony-AL00B 9.1.0.257(C00E222R2P1).

How severe is CVE-2021-22440?

CVE-2021-22440 has a CVSS score of 4.6/10 (MEDIUM severity). The EPSS model estimates a 0.21% probability of exploitation in the next 30 days.

How do I fix CVE-2021-22440?

Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.