PT-2023-15651 · Leia-B29 · Leia-B29

Published 2023-02-27 · Updated 2025-03-11 · CVE-2022-48254

Positive Technologies (AI Summary)

CVSS v3.1

4.6

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Leia-B29 version 2.0.0.49(M03)

Description The issue is related to a data processing error that could allow bypassing lock screen authentication. Successful exploitation of this error could lead to unauthorized access.

Recommendations For Leia-B29 version 2.0.0.49(M03), at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2022-48254

Affected Products

Leia-B29

References · 4

• https://huawei.com/en/psirt/security-advisories/2023/huawei-sa-dpeviahb-44e16f60-en · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-48254 · Security Note
• https://osv.dev/vulnerability/CVE-2022-48254 · Vendor Advisory
• https://t.me/cvenotify/114306 · Telegram Post