PT-2024-11760 · Huawei · Huawei Hilink Ai Life

Published 2024-12-28 · Updated 2025-12-09 · CVE-2022-48470

Positive Technologies (AI Summary)

CVSS v3.1

4.0

Medium

Base vector

AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L

Name of the Vulnerable Software and Affected Versions Huawei HiLink AI Life product (affected versions not specified)

Description The Huawei HiLink AI Life product has an identity authentication bypass issue. This could allow attackers to access restricted functions if the issue is successfully exploited.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-305

Related Identifiers

CVE-2022-48470

Affected Products

Huawei Hilink Ai Life

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2022-48470 · Security Note
• https://huawei.com/en/psirt/security-advisories/2023/huawei-sa-iabvihhalp-ea34d670-en · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-48470 · Vendor Advisory
• https://t.me/cveNotify/145261 · Telegram Post
• https://t.me/cvedetector/13813 · Telegram Post
• https://twitter.com/CVEnew/status/1872919480877383802 · Twitter Post