CVE-2022-22258: Critical severity emui 5.0 vulnerability

Published Apr 11, 2022

Updated

The Wi-Fi module has an event notification vulnerability.Successful exploitation of this vulnerability may allow third-party applications to intercept event notifications and add information and result in elevation-of-privilege.

Affected Software

8 affected components

Huawei Emui=10.1.0

Huawei Emui=10.1.1

Huawei Emui=11.0.0

Huawei Emui=12.0.0

Huawei Harmonyos=2.0

Huawei Magic Ui=3.1.0

Huawei Magic Ui=3.1.1

Huawei Magic Ui=4.0.0

Event History

Apr 11, 2022

CVE Published

via MITRE·07:38 PM

Data Sourced

via MITRE·07:38 PM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2022-22258?

CVE-2022-22258 is classified with a medium severity due to its potential for elevation of privilege exploitation.

How do I fix CVE-2022-22258?

To fix CVE-2022-22258, ensure that your device is updated to the latest software version provided by Huawei.

Which Huawei software versions are affected by CVE-2022-22258?

CVE-2022-22258 affects Huawei EMUI versions 10.1.0, 10.1.1, 11.0.0, and 12.0.0 as well as HarmonyOS 2.0 and Magic UI versions 3.1.0, 3.1.1, and 4.0.0.

What type of vulnerability is CVE-2022-22258?

CVE-2022-22258 is an event notification vulnerability in the Wi-Fi module.

Can CVE-2022-22258 lead to serious security issues?

Yes, successful exploitation of CVE-2022-22258 may allow third-party applications to intercept notifications, potentially leading to unauthorized access.