PT-2022-25965 · Huawei · Harmonyos

Published 2022-12-20 · Updated 2022-12-29 · CVE-2022-41590

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Smartphones (affected versions not specified)

Description The issue is related to authentication, including session management, where the setup wizard can be bypassed. This affects the availability of smartphones.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2022-41590

Affected Products

Harmonyos

References · 5

• https://device.harmonyos.com/en/docs/security/update/security-bulletins-202212-0000001462975397 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-41590 · Security Note
• https://osv.dev/vulnerability/CVE-2022-41590 · Vendor Advisory
• https://t.me/cibsecurity/55028 · Telegram Post
• https://t.me/cvenotify/40273 · Telegram Post