CVE-2022-37005: High severity Huawei Emui vulnerability

Published Aug 9, 2022

Updated

The Settings application has an argument injection vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.

Affected Software

7 affected components

Huawei Emui=10.1.1

Huawei Emui=11.0.0

Huawei Emui=11.0.1

Huawei Emui=12.0.0

Huawei Harmonyos=2.0

Huawei Magic Ui=3.1.1

Huawei Magic Ui=4.0.0

Event History

Aug 9, 2022

CVE Published

via MITRE·08:11 PM

Data Sourced

via MITRE·08:11 PM

DescriptionWeakness

Aug 10, 2022

Data Sourced

via NVD·08:16 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2022-37005?

CVE-2022-37005 is an argument injection vulnerability in the Settings application of Huawei devices running Emui 10.1.1, 11.0.0, 11.0.1, 12.0.0, or HarmonyOS 2.0, as well as Magic Ui 3.1.1 and 4.0.0.

How does CVE-2022-37005 affect data confidentiality?

Successful exploitation of CVE-2022-37005 may negatively impact data confidentiality on affected Huawei devices.

What is the severity of CVE-2022-37005?

CVE-2022-37005 has a severity value of 7.5, indicating a high severity.

How do I fix CVE-2022-37005?

To fix CVE-2022-37005, users should update their Huawei devices to the latest available software version provided by Huawei.

Where can I find more information about CVE-2022-37005?

More information about CVE-2022-37005 can be found on Huawei's support bulletin and HarmonyOS website.