PT-2022-24668 · Huawei · Huawei Aslan Children'S Watch

Published 2022-12-28 · Updated 2023-01-05 · CVE-2022-39012

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Huawei Aslan Children's Watch (affected versions not specified)

Description The issue is related to improper input validation, which may cause the watch's application service to become abnormal upon successful exploitation.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2022-39012

Affected Products

Huawei Aslan Children'S Watch

References · 4

• https://osv.dev/vulnerability/CVE-2022-39012 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-39012 · Security Note
• https://huawei.com/en/psirt/security-advisories/2022/huawei-sa-iivviahcw-5fb2d55c-en · Vendor Advisory
• https://t.me/cibsecurity/55502 · Telegram Post