CVE-2021-40043
High
Description
The laser command injection vulnerability exists on AIS-BW80H-00 versions earlier than AIS-BW80H-00 9.0.3.4(H100SP13C00). The devices cannot effectively defend against external malicious interference. Attackers need the device to be visually exploitable and successful triggering of this vulnerability could execute voice commands on the device.
SeverityHigh
CVSS7.8
Exploit probability—
ProductHuawei Ais-bw80h-00 Firmware
PublishedFeb 25, 2022
First seenFeb 25, 2022
How to fix
Update
- huawei ais-bw80h-00_firmware9.0.3.4\(h100sp13c00\) or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| huawei ais-bw80h-00_firmware | v < 9.0.3.4\(h100sp13c00\) | 9.0.3.4\(h100sp13c00\) |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.