Lucene search
HuaweiCVE-2022-37008HistoryAug 10, 2022 - 8:16 p.m.
CVE-2022-37008
2022-08-1020:16:04
CWE-345
huawei
web.nvd.nist.gov
31
7
cve-2022-37008
recovery module
update package verification
system stability
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
41.7%
The recovery module has a vulnerability of bypassing the verification of an update package before use. Successful exploitation of this vulnerability may affect system stability.
Affected configurations
Node
huaweiemuiMatch11.0.0
ORhuaweiemuiMatch11.0.1
ORhuaweiemuiMatch12.0.0
ORhuaweiharmonyosMatch2.0
ORhuaweimagic_uiMatch4.0.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| huawei | emui | 11.0.0 | cpe:2.3:o:huawei:emui:11.0.0:*:*:*:*:*:*:* |
| huawei | emui | 11.0.1 | cpe:2.3:o:huawei:emui:11.0.1:*:*:*:*:*:*:* |
| huawei | emui | 12.0.0 | cpe:2.3:o:huawei:emui:12.0.0:*:*:*:*:*:*:* |
| huawei | harmonyos | 2.0 | cpe:2.3:o:huawei:harmonyos:2.0:*:*:*:*:*:*:* |
| huawei | magic_ui | 4.0.0 | cpe:2.3:o:huawei:magic_ui:4.0.0:*:*:*:*:*:*:* |
CNA Affected
[
{
"product": "HarmonyOS",
"vendor": "Huawei",
"versions": [
{
"status": "affected",
"version": "2.0"
}
]
},
{
"product": "EMUI",
"vendor": "Huawei",
"versions": [
{
"status": "affected",
"version": "12.0.0"
},
{
"status": "affected",
"version": "11.0.1"
},
{
"status": "affected",
"version": "11.0.0"
}
]
},
{
"product": "Magic UI",
"vendor": "Huawei",
"versions": [
{
"status": "affected",
"version": "4.0.0"
}
]
}
]References
Social References
More
Related
prion
prion
Design/Logic Flaw
2022-08-10 20:16:00
cvelist
cvelist
CVE-2022-37008
2022-08-09 20:10:47
nvd
nvd
CVE-2022-37008
2022-08-10 20:16:04
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
41.7%
Related for CVE-2022-37008