Lucene search

K
nvd[email protected]NVD:CVE-2022-48291
HistoryMar 27, 2023 - 10:15 p.m.

CVE-2022-48291

2023-03-2722:15:19
CWE-306
web.nvd.nist.gov
3
bluetooth module
authentication bypass
pairing process
confidentiality
vulnerability

6.5 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

21.2%

The Bluetooth module has an authentication bypass vulnerability in the pairing process. Successful exploitation of this vulnerability may affect confidentiality.

Affected configurations

NVD
Node
huaweiemuiMatch11.0.1
OR
huaweiemuiMatch12.0.0
OR
huaweiemuiMatch12.0.1
OR
huaweiemuiMatch13.0.0
OR
huaweiharmonyosMatch2.0.0
OR
huaweiharmonyosMatch2.0.1
OR
huaweiharmonyosMatch3.0.0
OR
huaweiharmonyosMatch3.1.0

6.5 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

21.2%

Related for NVD:CVE-2022-48291