Lucene search

[email protected]CVE-2022-44557

HistoryNov 09, 2022 - 9:15 p.m.

CVE-2022-44557

2022-11-0921:15:18

[email protected]

web.nvd.nist.gov

smarttrimprocessevent

vulnerability

data confidentiality

nvd

cve-2022-44557

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.002 Low

EPSS

Percentile

52.5%

JSON

The SmartTrimProcessEvent module has a vulnerability of obtaining the read and write permissions on arbitrary system files. Successful exploitation of this vulnerability may affect data confidentiality.

Affected configurations

NVD

Node

huaweiharmonyosMatch2.0

huaweiharmonyosMatch2.1

huaweiharmonyosMatch3.0.0

Node

huaweiemuiMatch11.0.1

huaweiemuiMatch12.0.0

huaweiemuiMatch12.0.1

CPENameOperatorVersion
huawei:harmonyoshuawei harmonyoseq2.0
huawei:harmonyoshuawei harmonyoseq2.1
huawei:harmonyoshuawei harmonyoseq3.0.0

CPE	Name	Operator	Version
huawei:harmonyos	huawei harmonyos	eq	2.0
huawei:harmonyos	huawei harmonyos	eq	2.1
huawei:harmonyos	huawei harmonyos	eq	3.0.0

CNA Affected

[
  {
    "vendor": "Huawei",
    "product": "HarmonyOS",
    "versions": [
      {
        "version": "2.0",
        "status": "affected"
      },
      {
        "version": "2.1",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Huawei",
    "product": "EMUI",
    "versions": [
      {
        "version": "12.0.1",
        "status": "affected"
      },
      {
        "version": "12.0.0",
        "status": "affected"
      },
      {
        "version": "11.0.1",
        "status": "affected"
      }
    ]
  }
]

References

consumer.huawei.com/en/support/bulletin/2022/11/

device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202211-0000001441016433

Social References

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.002 Low

EPSS

Percentile

52.5%

JSON

Related for CVE-2022-44557

prion1 nvd1 cvelist1