CVE-2022-48313: Medium severity emui 5.0 vulnerability

Published Apr 16, 2023

Updated

The Bluetooth module has a vulnerability of bypassing the user confirmation in the pairing process. Successful exploitation of this vulnerability may affect confidentiality.

Affected Software

8 affected components

Huawei Emui=12.0.0

Huawei Emui=12.0.1

Huawei Emui=13.0.0

Huawei Harmonyos=2.0

Huawei Harmonyos=2.1

Huawei Harmonyos=2.1.0

Huawei Harmonyos=3.0.0

Huawei Harmonyos=3.1.0

Event History

Apr 16, 2023

CVE Published

via MITRE·07:07 AM

Data Sourced

via MITRE·07:07 AM

DescriptionWeakness

Data Sourced

via NVD·08:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2022-48313?

CVE-2022-48313 is classified as a high severity vulnerability due to its potential to bypass user confirmation during Bluetooth pairing, affecting confidentiality.

How do I fix CVE-2022-48313?

To fix CVE-2022-48313, users should update their Huawei devices to the latest firmware version provided by Huawei.

Which software versions are affected by CVE-2022-48313?

CVE-2022-48313 affects Huawei EMUI versions 12.0.0, 12.0.1, 13.0.0 and HarmonyOS versions 2.0, 2.1, 3.0.0, and 3.1.0.

What impact does CVE-2022-48313 have on my device?

CVE-2022-48313 may allow unauthorized access to the device through Bluetooth, compromising user confidentiality.

Is there a workaround for CVE-2022-48313?

Currently, the recommended action for CVE-2022-48313 is to apply the latest security updates, as there are no effective workarounds available.