First published: Sun Apr 16 2023(Updated: )
The Bluetooth module has a vulnerability of bypassing the user confirmation in the pairing process. Successful exploitation of this vulnerability may affect confidentiality.
Credit: psirt@huawei.com
Affected Software | Affected Version | How to fix |
---|---|---|
Huawei EMUI | =11.0.1 | |
Huawei EMUI | =12.0.0 | |
Huawei EMUI | =12.0.1 | |
Huawei EMUI | =13.0.0 | |
Huawei HarmonyOS | =2.0 | |
Huawei HarmonyOS | =2.1 | |
Huawei HarmonyOS | =2.1.0 | |
Huawei HarmonyOS | =3.0.0 | |
Huawei HarmonyOS | =3.1.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2022-48314 is categorized as critical due to potential exploitation affecting confidentiality.
To fix CVE-2022-48314, it is recommended to update the affected Huawei devices to the latest security patch versions provided by Huawei.
CVE-2022-48314 affects multiple versions of Huawei's EMUI and HarmonyOS, including versions 11.0.1, 12.0.0, 12.0.1, 13.0.0, and various 2.x and 3.x versions of HarmonyOS.
CVE-2022-48314 is a Bluetooth security vulnerability that allows bypassing of user confirmation during the pairing process.
Yes, CVE-2022-48314 can potentially be exploited remotely due to the nature of the Bluetooth vulnerability affecting the pairing process.