What is CVE-2021-40043?

CVE-2021-40043 is a high-severity vulnerability in Huawei Ais-Bw80h-00, classified under Command Injection. CVSS score: 7.8/10. Published 2022-02-25.

How severe is CVE-2021-40043?

High severity. CVSS v3 base score is 7.8 out of 10.

RCE in Huawei Ais-Bw80h-00

CVE-2021-40043

The laser command injection vulnerability exists on AIS-BW80H-00 versions earlier than AIS-BW80H-00 9.0.3.4(H100SP13C00). The devices cannot effectively defend against external malicious interference. Attackers need the device to be visually exploitable and successful triggering of this vulnerability could execute voice commands on the device.

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.004 (31.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Huawei Ais-bw80h-00
Huawei Ais-bw80h-00_firmware
N/a Ais-bw80h-00 — versions versions earlier than AIS-BW80H-00 9.0.3.4(H100SP13C00)

Weakness classification (CWE)

CWE-77 — Command Injection

References

psirt@huawei.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2021-40043?: CVE-2021-40043 is a high-severity vulnerability in Huawei Ais-Bw80h-00, classified under Command Injection. CVSS score: 7.8/10. Published 2022-02-25.
How severe is CVE-2021-40043?: High severity. CVSS v3 base score is 7.8 out of 10.