PT-2022-24667 · Unknown · Hisp Module

Wen Guanxing · Published 2022-10-14 · Updated 2022-10-18 · CVE-2022-39011

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions HISP module (affected versions not specified)

Description The issue concerns a vulnerability in the HISP module that allows bypassing the check of the data transferred in the kernel space. Successful exploitation of this issue may cause unauthorized access to the HISP module.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Protection Mechanism Failure

Weakness Enumeration

CWE-693

Related Identifiers

CVE-2022-39011

Affected Products

Hisp Module

References · 5

• https://consumer.huawei.com/en/support/bulletin/2022/10 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-39011 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-39011 · Security Note
• https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202210-0000001416095697 · Vendor Advisory
• https://t.me/cibsecurity/51448 · Telegram Post