by Kastro
Paper/Archive/CVE-2022-48605

CVE-2022-48605

Huawei HarmonyOS — Input verification vulnerability in the fingerprint module.

EPSS 0.5%CVSS 9.8
critical.is priorityof 100
38
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 42.4.424 × 208.5No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Input verification vulnerability in the fingerprint module. Successful exploitation of this vulnerability will affect confidentiality, integrity, and availability.

Affected

ProductAffectedFixed inSource
HarmonyOS4.0.0–CNA
HarmonyOS3.1.0–CNA
HarmonyOS3.0.0–CNA
EMUI13.0.0–CNA
EMUI11.0.1–CNA
harmonyos3.0.0–CISA-ADP
harmonyos3.1.0–CISA-ADP
harmonyos4.0.0–CISA-ADP
emui11.0.1–CISA-ADP
emui13.0.0–CISA-ADP

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refconsumer.huawei.com/en/support/bulletin/2023/9refdevice.harmonyos.com/en/docs/security/update/security-bulletins-202309-0000001638925158