Lucene search
HistorySep 16, 2022 - 6:15 p.m.
CVE-2022-39010
cve-2022-39010
hwchrservice
vulnerability
permission control
exploitation
disclosure
user network information
nvd
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.002 Low
EPSS
Percentile
52.5%
The HwChrService module has a vulnerability in permission control. Successful exploitation of this vulnerability may cause disclosure of user network information.
Affected configurations
Node
huaweiemuiMatch12.0.0
ORhuaweiharmonyosMatch2.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| huawei:emui | huawei emui | eq | 12.0.0 |
| huawei:harmonyos | huawei harmonyos | eq | 2.0 |
CNA Affected
[
{
"product": "HarmonyOS",
"vendor": "Huawei",
"versions": [
{
"status": "affected",
"version": "2.0"
}
]
},
{
"product": "EMUI",
"vendor": "Huawei",
"versions": [
{
"status": "affected",
"version": "12.0.0"
}
]
}
]References
Social References
More
Related
nvd
nvd
CVE-2022-39010
2022-09-16 18:15:18
cnvd
cnvd
Huawei HarmonyOS HwChrService module licensing issue vulnerability
2022-09-07 00:00:00
prion
prion
Design/Logic Flaw
2022-09-16 18:15:00
cvelist
cvelist
CVE-2022-39010
2022-09-16 17:57:54
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.002 Low
EPSS
Percentile
52.5%
Related for CVE-2022-39010