PT-2022-24657 · Iaware · Iaware

Published 2022-09-16 · Updated 2022-09-20 · CVE-2022-39000

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions iAware module (affected versions not specified)

Description The issue concerns a vulnerability in the iAware module's management of malicious apps. Successful exploitation of this vulnerability will cause malicious apps to automatically start upon system startup.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2022-39000

Affected Products

Iaware

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2022-39000 · Security Note
• https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202209-0000001392278845 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-39000 · Vendor Advisory
• https://consumer.huawei.com/en/support/bulletin/2022/9 · Vendor Advisory
• https://t.me/cvenotify/36538 · Telegram Post
• https://t.me/cibsecurity/49961 · Telegram Post