CVE-2022-48494

2023-06-1900:00:00

huawei

www.cve.org

vulnerability

identity verification

pre-authorization

exploitation

malicious apps

0.001 Low

EPSS

Percentile

20.2%

JSON

Vulnerability of lax app identity verification in the pre-authorization function.Successful exploitation of this vulnerability will cause malicious apps to become pre-authorized.

CNA Affected

[
  {
    "vendor": "Huawei",
    "product": "HarmonyOS",
    "versions": [
      {
        "version": "3.0.0",
        "status": "affected"
      },
      {
        "version": "2.1.0",
        "status": "affected"
      },
      {
        "version": "2.0.1",
        "status": "affected"
      },
      {
        "version": "2.0.0",
        "status": "affected"
      }
    ]
  },
  {
    "vendor": "Huawei",
    "product": "EMUI",
    "versions": [
      {
        "version": "13.0.0",
        "status": "affected"
      },
      {
        "version": "12.0.1",
        "status": "affected"
      },
      {
        "version": "12.0.0",
        "status": "affected"
      },
      {
        "version": "11.0.1",
        "status": "affected"
      }
    ]
  }
]

References

consumer.huawei.com/en/support/bulletin/2023/6/

0.001 Low

EPSS

Percentile

20.2%

JSON

Related for CVELIST:CVE-2022-48494