CVE-2022-22258 - The Wi-Fi module has an event notification vulnerability.Successful exploitation of this vulnerability may allow third-party applications to intercept event notifications and add information and result in elevation-of-privilege

Back Back to CVE browser

CRITICAL

The Wi-Fi module has an event notification vulnerability.Successful exploitation of this vulnerability may allow third-party applications to intercept event notifications and add information and result in elevation-of-privilege

Published Apr 11, 2022

9.8

CRITICAL

CVSS 3.1

EPSS 0.96%

Description

The Wi-Fi module has an event notification vulnerability.Successful exploitation of this vulnerability may allow third-party applications to intercept event notifications and add information and result in elevation-of-privilege.

Affected products

Vendor n/a Product HarmonyOS;EMUI;Magic UI Default
n/a
- Version
  EMUI 12.0.0,EMUI 11.0.1,EMUI 11.0.0,EMUI 10.1.1,EMUI 10.1.0
  Status
  affected
  Constraints
  -
- Version
  HarmonyOS 2.0
  Status
  affected
  Constraints
  -
- Version
  Magic UI 4.0.0,Magic UI 3.1.1,Magic UI 3.1.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

HarmonyOS;EMUI;Magic UI

n/a

Version	Status	Constraints
EMUI 12.0.0,EMUI 11.0.1,EMUI 11.0.0,EMUI 10.1.1,EMUI 10.1.0	affected	-
HarmonyOS 2.0	affected	-
Magic UI 4.0.0,Magic UI 3.1.1,Magic UI 3.1.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (4)

https://consumer.huawei.com/en/support/bulletin/2022/4/
x_refsource_MISCVendor Advisory
https://consumer.huawei.com/en/support/bulletin/2022/5/
x_refsource_MISCVendor Advisory
https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202204-0000001224076294
x_refsource_MISCVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-27405
Advisory

Link	Providers	Tags
https://consumer.huawei.com/en/support/bulletin/2022/4/		x_refsource_MISCVendor Advisory
https://consumer.huawei.com/en/support/bulletin/2022/5/		x_refsource_MISCVendor Advisory
https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202204-0000001224076294		x_refsource_MISCVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-27405		Advisory