CVE-2022-37002
First published: Tue Aug 09 2022(Updated: )
The SystemUI module has a privilege escalation vulnerability. Successful exploitation of this vulnerability can cause malicious applications to pop up windows or run in the background.
Credit: psirt@huawei.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Huawei EMUI | =10.0.0 | |
| Huawei EMUI | =10.1.0 | |
| Huawei EMUI | =10.1.1 | |
| Huawei EMUI | =11.0.0 | |
| Huawei EMUI | =11.0.1 | |
| Huawei EMUI | =12.0.0 | |
| Huawei HarmonyOS | =2.0 | |
| Huawei Magic UI | =3.0.0 | |
| Huawei Magic UI | =3.1.0 | |
| Huawei Magic UI | =3.1.1 | |
| Huawei Magic UI | =4.0.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2022-37002?
CVE-2022-37002 is classified as a privilege escalation vulnerability.
How do I fix CVE-2022-37002?
To mitigate CVE-2022-37002, update affected Huawei software to the latest version available.
Which software versions are affected by CVE-2022-37002?
CVE-2022-37002 affects Huawei EMUI versions 10.0.0, 10.1.0, 10.1.1, 11.0.0, 11.0.1, and 12.0.0, as well as HarmonyOS 2.0 and Magic UI versions 3.0.0, 3.1.0, 3.1.1, and 4.0.0.
What can attackers achieve by exploiting CVE-2022-37002?
Successful exploitation of CVE-2022-37002 allows attackers to run malicious applications in the background or pop up windows.
Is there a known attack vector for CVE-2022-37002?
The specific attack vector for CVE-2022-37002 has not been detailed, but it involves exploitation of SystemUI privileges.
- agent/references
- agent/author
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-api
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/huawei
- canonical/huawei emui
- version/huawei emui/10.0.0
- version/huawei emui/10.1.0
- version/huawei emui/10.1.1
- version/huawei emui/11.0.0
- version/huawei emui/11.0.1
- version/huawei emui/12.0.0
- canonical/huawei harmonyos
- version/huawei harmonyos/2.0
- canonical/huawei magic ui
- version/huawei magic ui/3.0.0
- version/huawei magic ui/3.1.0
- version/huawei magic ui/3.1.1
- version/huawei magic ui/4.0.0