Vulnerability · Published Feb 25, 2022 · Assigned by huawei
CVE-2021-40043
High 7.8
In plain English
A high-severity security flaw in AIS-BW80H-00. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 33% of all known vulnerabilities).
Severity (CVSS NVD)7.8High
Exploit odds (30 days)0.4%top 66.7% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
The laser command injection vulnerability exists on AIS-BW80H-00 versions earlier than AIS-BW80H-00 9.0.3.4(H100SP13C00). The devices cannot effectively defend against external malicious interference. Attackers need the device to be visually exploitable and successful triggering of this vulnerability could execute voice commands on the device.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | AIS-BW80H-00 | versions earlier than AIS-BW80H-00 9.0.3.4(H100SP13C00) |