CVE-2022-48301

2023-02-0917:15:15

CWE-281

[email protected]

web.nvd.nist.gov

vulnerability

permission verification

api

restoration

uninstalled apps

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS

0.001

Percentile

34.9%

JSON

The bundle management module lacks permission verification in some APIs. Successful exploitation of this vulnerability may restore the pre-installed apps that have been uninstalled.

Affected configurations

Nvd

Node

huaweiemuiMatch11.0.1

huaweiemuiMatch12.0.0

huaweiemuiMatch12.0.1

Node

huaweiharmonyosMatch2.0

huaweiharmonyosMatch2.1.0

huaweiharmonyosMatch3.0.0

VendorProductVersionCPE
huaweiemui11.0.1cpe:2.3:o:huawei:emui:11.0.1:*:*:*:*:*:*:*
huaweiemui12.0.0cpe:2.3:o:huawei:emui:12.0.0:*:*:*:*:*:*:*
huaweiemui12.0.1cpe:2.3:o:huawei:emui:12.0.1:*:*:*:*:*:*:*
huaweiharmonyos2.0cpe:2.3:o:huawei:harmonyos:2.0:*:*:*:*:*:*:*
huaweiharmonyos2.1.0cpe:2.3:o:huawei:harmonyos:2.1.0:*:*:*:*:*:*:*
huaweiharmonyos3.0.0cpe:2.3:o:huawei:harmonyos:3.0.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
huawei	emui	11.0.1	cpe:2.3:o:huawei:emui:11.0.1:::::::*
huawei	emui	12.0.0	cpe:2.3:o:huawei:emui:12.0.0:::::::*
huawei	emui	12.0.1	cpe:2.3:o:huawei:emui:12.0.1:::::::*
huawei	harmonyos	2.0	cpe:2.3:o:huawei:harmonyos:2.0:::::::*
huawei	harmonyos	2.1.0	cpe:2.3:o:huawei:harmonyos:2.1.0:::::::*
huawei	harmonyos	3.0.0	cpe:2.3:o:huawei:harmonyos:3.0.0:::::::*