by Kastro
Paper/Archive/CVE-2022-37002

CVE-2022-37002

Huawei HarmonyOS — The SystemUI module has a privilege escalation vulnerability.

EPSS 0.5%CVSS 9.8
critical.is priorityof 100
38
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 44.9.449 × 209.0No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

The SystemUI module has a privilege escalation vulnerability. Successful exploitation of this vulnerability can cause malicious applications to pop up windows or run in the background.

Affected

ProductAffectedFixed inSource
HarmonyOS2.0–CNA
EMUI12.0.0–CNA
EMUI11.0.1–CNA
EMUI11.0.0–CNA
EMUI10.1.1–CNA
EMUI10.1.0–CNA
EMUI10.0.0–CNA
Magic UI4.0.0–CNA
Magic UI3.1.1–CNA
Magic UI3.1.0–CNA
Magic UI3.0.0–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADP7.4CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refconsumer.huawei.com/en/support/bulletin/2022/8refdevice.harmonyos.com/en/docs/security/update/security-bulletins-phones-202208-0000001363876177