Lucene search
Huawei TechnologiesHUAWEI-SA-IIVVIAHCW-5FB2D55C-ENHistoryNov 23, 2022 - 12:00 a.m.
Security Advisory - Improper Input Validation Vulnerability in a Huawei Children's Watch
2022-11-2300:00:00
Huawei Technologies
www.huawei.com
9
huawei
children's watch
input validation
vulnerability
exploitation
service disruption
cve-2022-39012
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
38.7%
Huawei Aslan Children’s Watch has an improper input validation vulnerability. Successful exploitation may cause the watch’s application service abnormal. (Vulnerability ID:HWPSIRT-2022-53187)
This vulnerability has been assigned a (CVE) ID: CVE-2022-39012
Affected configurations
Node
huaweiaslan-al10_firmwareMatchaslan-al10-ota
ORhuaweiaslan-al10_firmwareMatch11.1.0.118
| Vendor | Product | Version | CPE |
|---|---|---|---|
| huawei | aslan-al10_firmware | aslan-al10-ota | cpe:2.3:o:huawei:aslan-al10_firmware:aslan-al10-ota:*:*:*:*:*:*:* |
| huawei | aslan-al10_firmware | 11.1.0.118 | cpe:2.3:o:huawei:aslan-al10_firmware:11.1.0.118:*:*:*:*:*:*:* |
Related
prion
prion
Input validation
2022-12-28 18:15:00
cve
cve
CVE-2022-39012
2022-12-28 18:15:08
cvelist
cvelist
CVE-2022-39012
2022-12-28 00:00:00
nvd
nvd
CVE-2022-39012
2022-12-28 18:15:08
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
38.7%
Related for HUAWEI-SA-IIVVIAHCW-5FB2D55C-EN