First published: Wed Nov 09 2022(Updated: )
There is a vulnerability in permission verification during the Bluetooth pairing process. Successful exploitation of this vulnerability may cause the dialog box for confirming the pairing not to be displayed during Bluetooth pairing.
Credit: psirt@huawei.com psirt@huawei.com
Affected Software | Affected Version | How to fix |
---|---|---|
Huawei HarmonyOS | =2.0 | |
Huawei HarmonyOS | =2.1 | |
Huawei HarmonyOS | =3.0.0 | |
Huawei EMUI | =11.0.1 | |
Huawei EMUI | =12.0.0 | |
Huawei EMUI | =12.0.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2022-44548 has a medium severity rating due to potential unauthorized Bluetooth access.
To fix CVE-2022-44548, ensure that your device is updated to the latest software version provided by Huawei.
CVE-2022-44548 affects devices running Huawei HarmonyOS 2.0, 2.1, 3.0.0, and EMUI versions 11.0.1, 12.0.0, and 12.0.1.
Exploitation of CVE-2022-44548 could lead to security risks such as unauthorized Bluetooth pairing without user consent.
There are currently no known active exploits for CVE-2022-44548, but it is recommended to apply security updates as a precaution.