Huawei TechnologiesHUAWEI-SA-20221102-01-D002DD8E-ENSecurity Advisory - Path Traversal Vulnerability in a Huawei Children's Watch
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
10.7%
Huawei Aslan Children’s Watch has a path traversal vulnerability. Successful exploitation may allow attackers to access or modify protected system resources. (Vulnerability ID:HWPSIRT-2022-99716)
This vulnerability has been assigned a (CVE) ID: CVE-2022-44564
Affected configurations
| CPE | Name | Operator | Version |
|---|---|---|---|
| aslan-al10 | eq | Aslan-AL10-OTA | |
| aslan-al10 | eq | 11.1.0.118 |
Related
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
0.0004 Low
EPSS
Percentile
10.7%