Summaryinfo

A vulnerability classified as critical has been found in Huawei JAD-AL50 102.0.0.225. This affects an unknown part of the component Cross Device Task Management. The manipulation leads to permission. This vulnerability is uniquely identified as CVE-2021-46834. There is no exploit available. If you want to get best quality of vulnerability data, you may have to visit VulDB.

Detailsinfo

A vulnerability was found in Huawei JAD-AL50 102.0.0.225. It has been rated as critical. Affected by this issue is an unknown code block of the component Cross Device Task Management. The manipulation with an unknown input leads to a permission vulnerability. Using CWE to declare the problem leads to CWE-275. Impacted is confidentiality, integrity, and availability. CVE summarizes:

A permission bypass vulnerability in Huawei cross device task management could allow an attacker to access certain resource in the attacked devices. Affected product versions include:JAD-AL50 versions 102.0.0.225(C00E220R3P4).

The weakness was released 09/21/2022 as huawei-sa-20220819-01. The advisory is available at huawei.com. This vulnerability is handled as CVE-2021-46834 since 08/19/2022. The technical details are unknown and an exploit is not available. The structure of the vulnerability defines a possible price range of USD $5k-$25k at the moment (estimation calculated on 05/28/2025). This vulnerability is assigned to T1222 by the MITRE ATT&CK project.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Vendor

• Huawei

Name

• JAD-AL50

Version

• 102.0.0.225

License

• commercial

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion