PT-2022-20908 · Unknown · Settings Module

Wen Guanxing · Published 2022-06-13 · Updated 2022-06-27 · CVE-2022-31757

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Setting module (affected versions not specified)

Description The issue concerns the improper use of APIs within the setting module. This could potentially impact data confidentiality if successfully exploited.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2022-31757

Affected Products

Settings Module

References · 5

• https://consumer.huawei.com/en/support/bulletin/2022/6 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-31757 · Security Note
• https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202206-0000001270350482 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-31757 · Vendor Advisory
• https://t.me/cibsecurity/44330 · Telegram Post