by Kastro
Paper/Archive/CVE-2022-48284

CVE-2022-48284

huawei — A piece of Huawei whole-home intelligence software has an Incorrect Privilege Assignment vulnerability.

EPSS 0.5%CVSS 9.8
critical.is priorityof 100
38
CVSS 9.8 (NVD, ADP agree)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 40.8.408 × 208.2No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A piece of Huawei whole-home intelligence software has an Incorrect Privilege Assignment vulnerability. Successful exploitation of this vulnerability could allow attackers to access restricted functions.

Affected

ProductAffectedFixed inSource
HarmonyOS AILife Solution 6.0HiLink AI Life 12.0.2.305–CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refhuawei.com/en/psirt/security-advisories/2023/huawei-sa-ipavihwhis-1556afc2-en