What is the severity of CVE-2022-45874?

CVE-2022-45874 is classified with a moderate severity level due to the potential for unauthorized access to certain files.

How do I fix CVE-2022-45874?

To fix CVE-2022-45874, update the Huawei Aslan-al10 firmware to a version beyond 11.1.0.10118(c00m06).

What kind of vulnerability is CVE-2022-45874?

CVE-2022-45874 is an improper authorization vulnerability affecting the Huawei Aslan Children's Watch.

Can CVE-2022-45874 lead to data breaches?

Yes, successful exploitation of CVE-2022-45874 could allow attackers to access sensitive files and potentially lead to data breaches.

Who is affected by CVE-2022-45874?

Users of Huawei Aslan-al10 devices with the affected firmware versions between 11.1.0.118 and 11.1.0.10118(c00m06) are at risk from CVE-2022-45874.

Vulnerability/
CVE-2022-45874

medium

5.5

28/12/2022

21/11/2024

CVE-2022-45874

First published: Wed Dec 28 2022(Updated: )

Huawei Aslan Children's Watch has an improper authorization vulnerability. Successful exploit could allow the attacker to access certain file.

Credit: psirt@huawei.com psirt@huawei.com

Affected Software	Affected Version	How to fix
Huawei Aslan-al10 Firmware	>=11.1.0.118\(c00m06\)<=11.1.0.10118\(c00m06\)
Huawei Aslan-al10
All of
Huawei Aslan-al10 Firmware	>=11.1.0.118\(c00m06\)<=11.1.0.10118\(c00m06\)
Huawei Aslan-al10

Never miss a vulnerability like this again

Reference Links

https://www.huawei.com/en/psirt/security-advisories/2022/huawei-sa-iaviahcw-21a3acd8-en

Frequently Asked Questions

What is the severity of CVE-2022-45874?
CVE-2022-45874 is classified with a moderate severity level due to the potential for unauthorized access to certain files.
How do I fix CVE-2022-45874?
To fix CVE-2022-45874, update the Huawei Aslan-al10 firmware to a version beyond 11.1.0.10118(c00m06).
What kind of vulnerability is CVE-2022-45874?
CVE-2022-45874 is an improper authorization vulnerability affecting the Huawei Aslan Children's Watch.
Can CVE-2022-45874 lead to data breaches?
Yes, successful exploitation of CVE-2022-45874 could allow attackers to access sensitive files and potentially lead to data breaches.
Who is affected by CVE-2022-45874?
Users of Huawei Aslan-al10 devices with the affected firmware versions between 11.1.0.118 and 11.1.0.10118(c00m06) are at risk from CVE-2022-45874.

agent/type
collector/mitre-cve
source/MITRE
agent/references
agent/severity
agent/description
agent/first-publish-date
agent/last-modified-date
agent/author
agent/event
agent/softwarecombine
agent/source
agent/tags
collector/nvd-api
source/NVD
agent/software-canonical-lookup
agent/software-canonical-lookup-request
collector/nvd-index
vendor/huawei
canonical/huawei aslan-al10
version/huawei aslan-al10/11.1.0.118\(c00m06\)
version/huawei aslan-al10/11.1.0.10118\(c00m06\)
canonical/huawei aslan-al10 firmware

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.