PT-2022-27664 · Huawei · Huawei Aslan Children'S Watch

Published 2022-12-28 · Updated 2025-04-11 · CVE-2022-45874

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Huawei Aslan Children's Watch (affected versions not specified)

Description The issue is related to an improper authorization vulnerability. If successfully exploited, it could allow an attacker to access certain files.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authorization

Weakness Enumeration

CWE-285

Related Identifiers

CVE-2022-45874

Affected Products

Huawei Aslan Children'S Watch

References · 5

• https://osv.dev/vulnerability/CVE-2022-45874 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-45874 · Security Note
• https://huawei.com/en/psirt/security-advisories/2022/huawei-sa-iaviahcw-21a3acd8-en · Vendor Advisory
• https://t.me/cibsecurity/55506 · Telegram Post
• https://t.me/cvenotify/118889 · Telegram Post