CVE-2021-40148

In Modem EMM, there is a possible information disclosure due to a missing data encryption. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00716585; Issue ID: ALPS05886933.

• CWE-319

• https://corp.mediatek.com/product-security-bulletin/January-2022Vendor Advisory
• https://corp.mediatek.com/product-security-bulletin/January-2022Vendor Advisory

Published

Jan 4, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-4014Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2021-40142In OPC Foundation Local Discovery Server (LDS) before 1.04.4…7.5
• CVE-2021-40143Sonatype Nexus Repository 3.x through 3.33.1-01 is vulnerabl…8.2
• CVE-2021-40145gdImageGd2Ptr in gd_gd2.c in the GD Graphics Library (aka Li…7.5
• CVE-2021-40146A Remote Code Execution (RCE) vulnerability was discovered i…9.8
• CVE-2021-40147EmTec ZOC before 8.02.2 allows \e[201~ pastes, a different v…9.8
• CVE-2021-40149The web server of the E1 Zoom camera through 3.0.0.716 discl…5.9
• CVE-2021-4015firefly-iii is vulnerable to Cross-Site Request Forgery (CSR…4.3
• CVE-2021-40150The web server of the E1 Zoom camera through 3.0.0.716 discl…7.5
• CVE-2021-40153squashfs_opendir in unsquash-1.c in Squashfs-Tools 4.5 store…8.1
• CVE-2021-40154NXP LPC55S69 devices before A3 have a buffer over-read via a…5.5
• CVE-2021-40155A maliciously crafted DWG file in Autodesk Navisworks 2019, …7.8