CVE-2022-48314: Medium severity emui 5.0 vulnerability

Published Apr 16, 2023

Updated

The Bluetooth module has a vulnerability of bypassing the user confirmation in the pairing process. Successful exploitation of this vulnerability may affect confidentiality.

Affected Software

9 affected components

Huawei Emui=11.0.1

Huawei Emui=12.0.0

Huawei Emui=12.0.1

Huawei Emui=13.0.0

Huawei Harmonyos=2.0

Huawei Harmonyos=2.1

Huawei Harmonyos=2.1.0

Huawei Harmonyos=3.0.0

Huawei Harmonyos=3.1.0

Event History

Apr 16, 2023

CVE Published

via MITRE·07:11 AM

Data Sourced

via MITRE·07:11 AM

DescriptionWeakness

Data Sourced

via NVD·08:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2022-48314?

The severity of CVE-2022-48314 is categorized as critical due to potential exploitation affecting confidentiality.

How do I fix CVE-2022-48314?

To fix CVE-2022-48314, it is recommended to update the affected Huawei devices to the latest security patch versions provided by Huawei.

What software is affected by CVE-2022-48314?

CVE-2022-48314 affects multiple versions of Huawei's EMUI and HarmonyOS, including versions 11.0.1, 12.0.0, 12.0.1, 13.0.0, and various 2.x and 3.x versions of HarmonyOS.

What type of vulnerability is CVE-2022-48314?

CVE-2022-48314 is a Bluetooth security vulnerability that allows bypassing of user confirmation during the pairing process.

Can CVE-2022-48314 be exploited remotely?

Yes, CVE-2022-48314 can potentially be exploited remotely due to the nature of the Bluetooth vulnerability affecting the pairing process.