CVE-2021-37104: Huawei p40 Firmware

High severity, CVSS 7.5. EPSS: 0.7% chance of exploitation in the next 30 days.

There is a server-side request forgery vulnerability in HUAWEI P40 versions 10.1.0.118(C00E116R3P3). This vulnerability is due to insufficient validation of parameters while dealing with some messages. A successful exploit could allow the attacker to gain access to certain resource which the attacker are supposed not to do.

Affected products

• Huawei p40 Firmware: version 10.1.0.118(c00e116r3p3) only

Published 2021-09-28. Last modified 2026-06-17.