CVE-2021-40043

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-02-25 · updated 2026-06-17
Weakness: CWE-77

Description

The laser command injection vulnerability exists on AIS-BW80H-00 versions earlier than AIS-BW80H-00 9.0.3.4(H100SP13C00). The devices cannot effectively defend against external malicious interference. Attackers need the device to be visually exploitable and successful triggering of this vulnerability could execute voice commands on the device.

Affected products

AIS-BW80H-00: before 9.0.3.4\(h100sp13c00\) — fixed in 9.0.3.4\(h100sp13c00\)

How to fix

Upgrade to a fixed version: AIS-BW80H-00 9.0.3.4\(h100sp13c00\). Check the vendor advisory for mitigations.

References

https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20220126-01-df75863e-en
https://www.huawei.com/en/psirt/security-advisories/huawei-sa-20220126-01-df75863e-en

Get alerted when CVE-2021-40043 or the next vulnerability affects your stack