Lucene search
+L

3 matches found

OSV
OSV
added 2022/12/08 4:15 p.m.7 views

CVE-2022-45877

OpenHarmony-v3.1.4 and prior versions had an vulnerability. PIN code is transmitted to the peer device in plain text during cross-device authentication, which reduces the difficulty of man-in-the-middle attacks...

5.3CVSS5.8AI score0.00169EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2022/12/08 12:0 a.m.11 views

CVE-2022-45877 PIN code is transmitted to the peer device in plain text during cross-device authentication, which reduces the difficulty of man-in-the-middle attacks.

OpenHarmony-v3.1.4 and prior versions had an vulnerability. PIN code is transmitted to the peer device in plain text during cross-device authentication, which reduces the difficulty of man-in-the-middle attacks...

8.3CVSS7AI score0.00169EPSS
SaveExploits0References1
CVE
CVE
added 2022/12/08 12:0 a.m.76 views

CVE-2022-45877

OpenHarmony v3.1.4 and earlier are affected by CVE-2022-45877, where the PIN code is transmitted in plaintext during cross-device authentication, enabling easier MITM attempts. Affected component: cross-device authentication flow in OpenHarmony before 3.1.4. Root cause: PIN code transmitted in pl...

8.3CVSS6.2AI score0.00169EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder