First published: Tue Dec 20 2022(Updated: )
The backup module has a path traversal vulnerability. Successful exploitation of this vulnerability causes unauthorized access to other system files.
Credit: psirt@huawei.com
Affected Software | Affected Version | How to fix |
---|---|---|
Huawei EMUI | =11.0.1 | |
Huawei EMUI | =12.0.0 | |
Huawei EMUI | =12.0.1 | |
Huawei HarmonyOS | =2.0 | |
Huawei HarmonyOS | =2.1 | |
Huawei HarmonyOS | =3.0.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2022-41591 is considered a high-severity vulnerability due to its potential for unauthorized access to system files.
To address CVE-2022-41591, ensure that you update to the latest versions of Huawei Emui and HarmonyOS as provided by Huawei.
CVE-2022-41591 affects Huawei Emui versions 11.0.1, 12.0.0, and 12.0.1, as well as HarmonyOS versions 2.0, 2.1, and 3.0.0.
Yes, successful exploitation of CVE-2022-41591 could result in unauthorized access to sensitive system files, potentially leading to data breaches.
There is no known workaround for CVE-2022-41591; updating the affected software is the recommended action.