CVE-2022-44548: Medium severity Huawei Harmonyos vulnerability

Published Nov 9, 2022

Updated

There is a vulnerability in permission verification during the Bluetooth pairing process. Successful exploitation of this vulnerability may cause the dialog box for confirming the pairing not to be displayed during Bluetooth pairing.

Affected Software

6 affected components

Huawei Harmonyos=2.0

Huawei Harmonyos=2.1

Huawei Harmonyos=3.0.0

Huawei Emui=11.0.1

Huawei Emui=12.0.0

Huawei Emui=12.0.1

Event History

Nov 9, 2022

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Data Sourced

via NVD·09:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2022-44548?

CVE-2022-44548 has a medium severity rating due to potential unauthorized Bluetooth access.

How do I fix CVE-2022-44548?

To fix CVE-2022-44548, ensure that your device is updated to the latest software version provided by Huawei.

Which devices are affected by CVE-2022-44548?

CVE-2022-44548 affects devices running Huawei HarmonyOS 2.0, 2.1, 3.0.0, and EMUI versions 11.0.1, 12.0.0, and 12.0.1.

What are the implications of CVE-2022-44548?

Exploitation of CVE-2022-44548 could lead to security risks such as unauthorized Bluetooth pairing without user consent.

Is CVE-2022-44548 being actively exploited?

There are currently no known active exploits for CVE-2022-44548, but it is recommended to apply security updates as a precaution.