Design/Logic Flaw

2022-11-0921:15:00

PRIOn knowledge base

www.prio-n.com

permission verification

vulnerability

unauthorized apps

widgets

shortcuts

0.001 Low

EPSS

Percentile

34.3%

JSON

The preset launcher module has a permission verification vulnerability. Successful exploitation of this vulnerability makes unauthorized apps add arbitrary widgets and shortcuts without interaction.

CPENameOperatorVersion
emuieq11.0.1
emuieq12.0.0
emuieq12.0.1
harmonyoseq2.0
harmonyoseq3.0.0

Name	Operator	Version
emui	eq	11.0.1
emui	eq	12.0.0
emui	eq	12.0.1
harmonyos	eq	2.0
harmonyos	eq	3.0.0

References

consumer.huawei.com/en/support/bulletin/2022/11/

device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202211-0000001441016433

0.001 Low

EPSS

Percentile

34.3%

JSON

Related for PRION:CVE-2022-44561