CVE-2022-48359 — Improperly Controlled Modification of Dynamically-Determined Object Attributes in Huawei Emui

CWE-915 — Improperly Controlled Modification of Dynamically-Determined Object Attributes3 documents3 sources

Severity

7.5HIGHNVD

EPSS

0.3%

top 45.16%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Huawei Emui Huawei Harmonyos

Timeline

PublishedMar 27

Latest updateMar 28

Description

The recovery mode for updates has a vulnerability that causes arbitrary disk modification. Successful exploitation of this vulnerability may affect confidentiality.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages4 packages

▶CVEListV5huawei/emui4 versions+3

▶NVDhuawei/emui4 versions+3

▶CVEListV5huawei/harmonyos5 versions+4

▶NVDhuawei/harmonyos5 versions+4

🔴Vulnerability Details

GHSA

GHSA-ffcf-48j3-23jr: The recovery mode for updates has a vulnerability that causes arbitrary disk modification↗2023-03-28

▶

CVEList

CVE-2022-48359: The recovery mode for updates has a vulnerability that causes arbitrary disk modification↗2023-03-27

▶