CVE-2022-44548 - There is a vulnerability in permission verification during the Bluetooth pairing process

Back Back to CVE browser

MEDIUM

There is a vulnerability in permission verification during the Bluetooth pairing process

Published Nov 9, 2022

4.3

MEDIUM

CVSS 3.1

EPSS 0.19%

Description

There is a vulnerability in permission verification during the Bluetooth pairing process. Successful exploitation of this vulnerability may cause the dialog box for confirming the pairing not to be displayed during Bluetooth pairing.

Affected products

Vendor Huawei Product EMUI Default
n/a
- Version
  11.0.1
  Status
  affected
  Constraints
  -
- Version
  12.0.0
  Status
  affected
  Constraints
  -
- Version
  12.0.1
  Status
  affected
  Constraints
  -
Vendor Huawei Product HarmonyOS Default
n/a
- Version
  2.0
  Status
  affected
  Constraints
  -
- Version
  2.1
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Huawei

EMUI

n/a

Version	Status	Constraints
11.0.1	affected	-
12.0.0	affected	-
12.0.1	affected	-

Huawei

HarmonyOS

n/a

Version	Status	Constraints
2.0	affected	-
2.1	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-276

Incorrect Default Permissions

References (2)

https://consumer.huawei.com/en/support/bulletin/2022/11/
Vendor Advisory
https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202211-0000001441016433
Vendor Advisory

Link	Providers	Tags
https://consumer.huawei.com/en/support/bulletin/2022/11/		Vendor Advisory
https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202211-0000001441016433		Vendor Advisory