Lucene search

K
nvd[email protected]NVD:CVE-2022-48313
HistoryApr 16, 2023 - 8:15 a.m.

CVE-2022-48313

2023-04-1608:15:07
web.nvd.nist.gov
cve-2022-48313
bluetooth module
user confirmation
pairing process
vulnerability
confidentiality

6.5 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

28.0%

The Bluetooth module has a vulnerability of bypassing the user confirmation in the pairing process. Successful exploitation of this vulnerability may affect confidentiality.

Affected configurations

NVD
Node
huaweiemuiMatch12.0.0
OR
huaweiemuiMatch12.0.1
OR
huaweiemuiMatch13.0.0
OR
huaweiharmonyosMatch2.0
OR
huaweiharmonyosMatch2.1
OR
huaweiharmonyosMatch2.1.0
OR
huaweiharmonyosMatch3.0.0
OR
huaweiharmonyosMatch3.1.0

6.5 Medium

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

0.001 Low

EPSS

Percentile

28.0%

Related for NVD:CVE-2022-48313