Huawei TechnologiesHUAWEI-SA-IABVITHCSWSA-C385B2DCSecurity Advisory - Identity Authentication Bypass Vulnerability in The Huawei Children Smart Watch (Simba-AL00)
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
Percentile
13.3%
The Huawei Children Smart Watch (Simba-AL00) has an identity authentication bypass vulnerability. Successful exploitation of this vulnerability may cause the access control function of specific applications to fail.(Vulnerability ID:HWPSIRT-2022-18770)
This vulnerability has been assigned a (CVE) ID: CVE-2022-48305
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| huawei | simba-al00_firmware | simba-al00 | cpe:2.3:o:huawei:simba-al00_firmware:simba-al00:*:*:*:*:*:*:* |
| huawei | simba-al00_firmware | 1.1.1.274 | cpe:2.3:o:huawei:simba-al00_firmware:1.1.1.274:*:*:*:*:*:*:* |
Related
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
Percentile
13.3%