Huawei SMC2.0 vulnerabilities

2 CVEs affecting Huawei SMC2.0, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-22340, published 2021-06-29.

More from Huawei.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2015-2808, published 2015-04-01. Low severity, CVSS 3.7. EPSS: 73.9% chance of exploitation in the next 30 days. The RC4 algorithm, as used in the TLS protocol and SSL protocol, does not properly combine state data with key data during the initialization phase, which makes it easier for remote attackers to…
• CVE-2021-22340, published 2021-06-29. Medium severity, CVSS 4.1. EPSS: 0.1% chance of exploitation in the next 30 days. There is a multiple threads race condition vulnerability in Huawei product. A race condition exists for concurrent I/O read by multiple threads. An attacker with the root permission can exploit this…