CVE:CVE-2021-22440
CNNVD:CNNVD-202106-2021
Huawei Mate 20等都是中国华为（Huawei）公司的产品。Huawei Mate 20是一款智能手机。Huawei Honor Magic 2是一款智能手机。Huawei Mate 20 Pro是一款智能手机。
多款华为产品存在安全漏洞，该漏洞源于程序在使用外部输入构造路径访问受限目录下的文件时没有正确校验构造的路径名。攻击者可利用该漏洞能够访问受限目录之外的文件。
solution:Upgrade huawei mate_20_firmware to a higher version than 9.0.0.195(c01e195r2p1,9.1.0.139(c00e133r3p1,and avoid the version 9.0.0.195(c01e195r2p1),9.1.0.139(c00e133r3p1); Upgrade huawei mate_20_pro_firmware to a higher version than 9.0.0.187(c432e10r1p16,9.0.0.188(c185e10r2p1,9.0.0.245(c10e10r2p1,9.0.0.266(c432e10r1p16,9.0.0.267(c636e10r2p1,9.0.0.268(c635e12r1p16,9.0.0.278(c185e10r2p1,and avoid the version 9.0.0.187(c432e10r1p16),9.0.0.188(c185e10r2p1),9.0.0.245(c10e10r2p1),9.0.0.266(c432e10r1p16),9.0.0.267(c636e10r2p1),9.0.0.268(c635e12r1p16),9.0.0.278(c185e10r2p1); Upgrade huawei hima-l29c_firmware to a higher version than 9.0.0.105(c10e9r1p16,9.0.0.105(c185e9r1p16,9.0.0.105(c636e9r1p16,and avoid the version 9.0.0.105(c10e9r1p16),9.0.0.105(c185e9r1p16),9.0.0.105(c636e9r1p16); Upgrade huawei laya-al00ep_firmware to a higher version than 9.1.0.139(c786e133r3p1,and avoid the version 9.1.0.139(c786e133r3p1); Upgrade huawei oxfords-an00a_firmware to a higher version than 10.1.0.223(c00e210r5p1,and avoid the version 10.1.0.223(c00e210r5p1); Upgrade huawei tony-al00b_firmware to a higher version than 9.1.0.257(c00e222r2p1,and avoid the version 9.1.0.257(c00e222r2p1)