First published: Mon Apr 11 2022(Updated: )
The customization framework has a vulnerability of improper permission control.Successful exploitation of this vulnerability may affect data integrity.
Credit: psirt@huawei.com
Affected Software | Affected Version | How to fix |
---|---|---|
Huawei EMUI | =10.0.0 | |
Huawei EMUI | =10.1.0 | |
Huawei EMUI | =10.1.1 | |
Huawei EMUI | =11.0.0 | |
Huawei EMUI | =11.0.1 | |
Huawei EMUI | =12.0.0 | |
Huawei HarmonyOS | =2.0 | |
Huawei Magic UI | =3.0.0 | |
Huawei Magic UI | =3.1.0 | |
Huawei Magic UI | =3.1.1 | |
Huawei Magic UI | =4.0.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2022-22257 has a moderate severity rating due to the potential impact on data integrity.
To fix CVE-2022-22257, update your Huawei device to the latest firmware version provided in the official security bulletins.
CVE-2022-22257 affects several Huawei products, including EMUI versions 10.0.0, 10.1.0, 10.1.1, 11.0.0, 11.0.1, and 12.0.0, as well as HarmonyOS version 2.0 and Magic UI versions 3.0.0, 3.1.0, 3.1.1, and 4.0.0.
CVE-2022-22257 is classified as an improper permission control vulnerability.
Successful exploitation of CVE-2022-22257 could lead to a compromise of data integrity on affected Huawei devices.