CVE-2022-41590 - Some smartphones have authentication-related (including session management) vulnerabilities as the setup wizard is bypassed

Back Back to CVE browser

MEDIUM

Some smartphones have authentication-related (including session management) vulnerabilities as the setup wizard is bypassed

Published Dec 20, 2022

5.5

MEDIUM

CVSS 3.1

EPSS 0.13%

Description

Some smartphones have authentication-related (including session management) vulnerabilities as the setup wizard is bypassed. Successful exploitation of this vulnerability affects the smartphone availability.

Affected products

Vendor Huawei Product HarmonyOS Default
n/a
- Version
  3.0.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Huawei

HarmonyOS

n/a

Version	Status	Constraints
3.0.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-287

Improper Authentication

References (1)

https://device.harmonyos.com/en/docs/security/update/security-bulletins-202212-0000001462975397
Vendor Advisory

Link	Providers	Tags
https://device.harmonyos.com/en/docs/security/update/security-bulletins-202212-0000001462975397		Vendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner huawei

Published Dec 20, 2022

Updated Apr 16, 2025

Reserved Sep 27, 2022

Link CVE-2022-41590

CISA Vulnrichment

Updated Apr 16, 2025

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-41590

Red Hat

Severity n/a

Public date n/a

Links CVE-2022-41590