CVE-2021-22440

lowpriority · track · 18EPSS 0.002 · 11 %ileEUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.21% (11th) EPSS

CVSS 2.1 · low

Is it mine?

21 products

Check your exposure

Who says so?

3 sources

cnnvd · enisa_euvd · nvd

EPSS · scored 2026-10-28

There is a path traversal vulnerability in some Huawei products. The vulnerability is due to that the software uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the software does not properly validate the pathname. Successful exploit could allow the attacker to access a location that is outside of the restricted directory by a crafted filename. Affected product versions include:HUAWEI Mate 20 9.0.0.195(C01E195R2P1), 9.1.0.139(C00E133R3P1);HUAWEI Mate 20 Pro 9.0.0.187(C432E10R1P16), 9.0.0.188(C185E10R2P1), 9.0.0.245(C10E10R2P1), 9.0.0.266(C432E10R1P16), 9.0.0.267(C636E10R2P1), 9.0.0.268(C635E12R1P16), 9.0.0.278(C185E10R2P1); Hima-L29C 9.0.0.105(C10E9R1P16), 9.0.0.105(C185E9R1P16), 9.0.0.105(C636E9R1P16); Laya-AL00EP 9.1.0.139(C786E133R3P1); OxfordS-AN00A 10.1.0.223(C00E210R5P1); Tony-AL00B 9.1.0.257(C00E222R2P1).

cvss

Technical severity, 0–10. One row per scoring source.

4.6

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · low–medium · 2.1–4.6

v2.02.1lowAV:L/AC:L/Au:N/C:P/I:N/A:Nprimary · NVD / NIST USexploitability 3.9 · impact 2.9

v3.14.6mediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nprimary · NVD / NIST USexploitability 0.9 · impact 3.6

v3.14.2mediumCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:Usecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-22USprimary

affected products (21)

Products and version ranges known to be affected.

n/a HUAWEI Mate 20;HUAWEI Mate 20 Pro;Hima-L29C;Laya-AL00EP;OxfordS-AN00A;Tony-AL00B≤ 9.1.0.257(C00E222R2P1)enisa_euvdEU
n/a HUAWEI Mate 20;HUAWEI Mate 20 Pro;Hima-L29C;Laya-AL00EP;OxfordS-AN00A;Tony-AL00B≤ 9.0.0.195(C01E195R2P1),9.1.0.139(C00E133R3P1)enisa_euvdEU
n/a HUAWEI Mate 20;HUAWEI Mate 20 Pro;Hima-L29C;Laya-AL00EP;OxfordS-AN00A;Tony-AL00B≤ 10.1.0.223(C00E210R5P1)enisa_euvdEU
n/a HUAWEI Mate 20;HUAWEI Mate 20 Pro;Hima-L29C;Laya-AL00EP;OxfordS-AN00A;Tony-AL00B≤ 9.0.0.105(C10E9R1P16),9.0.0.105(C185E9R1P16),9.0.0.105(C636E9R1P16)enisa_euvdEU
n/a HUAWEI Mate 20;HUAWEI Mate 20 Pro;Hima-L29C;Laya-AL00EP;OxfordS-AN00A;Tony-AL00B≤ 9.0.0.187(C432E10R1P16),9.0.0.188(C185E10R2P1),9.0.0.245(C10E10R2P1),9.0.0.266(C432E10R1P16),9.0.0.267(C636E10R2P1),9.0.0.268(C635E12R1P16),9.0.0.278(C185E10R2P1)enisa_euvdEU
n/a HUAWEI Mate 20;HUAWEI Mate 20 Pro;Hima-L29C;Laya-AL00EP;OxfordS-AN00A;Tony-AL00B≤ 9.1.0.139(C786E133R3P1)enisa_euvdEU
huawei hima-l29c firmware= 9.0.0.105(c10e9r1p16)nvdUScpe:2.3:o:huawei:hima-l29c_firmware:*:*:*:*:*:*:*:*
huawei hima-l29c firmware= 9.0.0.105(c185e9r1p16)nvdUScpe:2.3:o:huawei:hima-l29c_firmware:*:*:*:*:*:*:*:*
huawei hima-l29c firmware= 9.0.0.105(c636e9r1p16)nvdUScpe:2.3:o:huawei:hima-l29c_firmware:*:*:*:*:*:*:*:*
huawei laya-al00ep firmware= 9.1.0.139(c786e133r3p1)nvdUScpe:2.3:o:huawei:laya-al00ep_firmware:*:*:*:*:*:*:*:*
huawei mate 20 firmware= 9.0.0.195(c01e195r2p1)nvdUScpe:2.3:o:huawei:mate_20_firmware:*:*:*:*:*:*:*:*
huawei mate 20 firmware= 9.1.0.139(c00e133r3p1)nvdUScpe:2.3:o:huawei:mate_20_firmware:*:*:*:*:*:*:*:*
huawei mate 20 pro firmware= 9.0.0.187(c432e10r1p16)nvdUScpe:2.3:o:huawei:mate_20_pro_firmware:*:*:*:*:*:*:*:*
huawei mate 20 pro firmware= 9.0.0.188(c185e10r2p1)nvdUScpe:2.3:o:huawei:mate_20_pro_firmware:*:*:*:*:*:*:*:*
huawei mate 20 pro firmware= 9.0.0.245(c10e10r2p1)nvdUScpe:2.3:o:huawei:mate_20_pro_firmware:*:*:*:*:*:*:*:*
huawei mate 20 pro firmware= 9.0.0.266(c432e10r1p16)nvdUScpe:2.3:o:huawei:mate_20_pro_firmware:*:*:*:*:*:*:*:*
huawei mate 20 pro firmware= 9.0.0.267(c636e10r2p1)nvdUScpe:2.3:o:huawei:mate_20_pro_firmware:*:*:*:*:*:*:*:*
huawei mate 20 pro firmware= 9.0.0.268(c635e12r1p16)nvdUScpe:2.3:o:huawei:mate_20_pro_firmware:*:*:*:*:*:*:*:*
huawei mate 20 pro firmware= 9.0.0.278(c185e10r2p1)nvdUScpe:2.3:o:huawei:mate_20_pro_firmware:*:*:*:*:*:*:*:*
huawei oxfords-an00a firmware= 10.1.0.223(c00e210r5p1)nvdUScpe:2.3:o:huawei:oxfords-an00a_firmware:*:*:*:*:*:*:*:*

showing 20 of 21

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd nvd NVD CVE.org MITRE

published 2021-07-13modified 2026-06-17

related (12,538)

Related entries.

ID	severity	EPSS	exploitable	published
CVE-2026-104286US	—OT critical	4.57% (92nd)	KEV	2026-10-01
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0, FortiMail 7.6.0 through 7.6.5, FortiMail 7.4.0 through…
CVE-2026-93616US	—OT critical	91.6% (100th)	KEV	2026-09-22
A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on Check Point Management Server.
CVE-2026-85706US	—OT critical	97.4% (100th)	KEV	2026-09-12
GitLab has remediated an issue in GitLab CE/EE affecting all versions from 18.7 before 18.11.12, 19.0 before 19.0.9, 19.1 before 19.1.8, 19.2 before 19.2.6, and 19.3 before 19.3.2…
CVE-2026-66384US	—OT critical	0.66% (52nd)	KEV	2026-08-12
An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions.
CVE-2026-59310US	—OT critical	2.56% (85th)	KEV	2026-07-30
VMware vCenter contains a directory traversal vulnerability in the Syslog server. A malicious actor with network access to vCenter may exploit this issue to execute arbitrary code.

+12533 more

references (5)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan