Security feature bypass

2022-11-0921:15:00

PRIOn knowledge base

www.prio-n.com

smarttrimprocessevent vulnerability

data confidentiality

system files permissions

0.002 Low

EPSS

Percentile

52.5%

JSON

The SmartTrimProcessEvent module has a vulnerability of obtaining the read and write permissions on arbitrary system files. Successful exploitation of this vulnerability may affect data confidentiality.

CPENameOperatorVersion
emuieq11.0.1
emuieq12.0.0
emuieq12.0.1
harmonyoseq2.0
harmonyoseq2.1
harmonyoseq3.0.0

Name	Operator	Version
emui	eq	11.0.1
emui	eq	12.0.0
emui	eq	12.0.1
harmonyos	eq	2.0
harmonyos	eq	2.1
harmonyos	eq	3.0.0

References

consumer.huawei.com/en/support/bulletin/2022/11/

device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202211-0000001441016433

0.002 Low

EPSS

Percentile

52.5%

JSON

Related for PRION:CVE-2022-44557