CVE-2022-22256 — Huawei Emui vulnerability

3 documents3 sources
Severity
7.5HIGHNVD
EPSS
0.1%
top 67.34%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Huawei EmuiHuawei HarmonyosHuawei Magic UI
Timeline
PublishedApr 11
Latest updateApr 12

Description

The DFX module has an access control vulnerability.Successful exploitation of this vulnerability may affect data confidentiality.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages6 packages

▶CVEListV5huawei/emui6 versions+5
▶NVDhuawei/emui6 versions+5
▶CVEListV5huawei/magic_ui4 versions+3
▶NVDhuawei/magic_ui4 versions+3
▶CVEListV5huawei/harmonyos2.0

🔴Vulnerability Details

2
GHSA
GHSA-7m8g-2c9f-q6q3: The DFX module has an access control vulnerability↗2022-04-12
▶
CVEList
CVE-2022-22256: The DFX module has an access control vulnerability↗2022-04-11
▶
CVE-2022-22256 — Huawei Emui vulnerability | cvebase