CVE-2022-46313 - The sensor privacy module has an authentication vulnerability

Back Back to CVE browser

MEDIUM

The sensor privacy module has an authentication vulnerability

Published Dec 20, 2022

5.3

MEDIUM

CVSS 3.1

EPSS 0.43%

Description

The sensor privacy module has an authentication vulnerability. Successful exploitation of this vulnerability may cause unavailability of the smartphone's camera and microphone.

Affected products

Vendor Huawei Product HarmonyOS Default
n/a
- Version
  3.0.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Huawei

HarmonyOS

n/a

Version	Status	Constraints
3.0.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-287

Improper Authentication

References (2)

https://device.harmonyos.com/en/docs/security/update/security-bulletins-202212-0000001462975397
PatchVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-49130
Advisory

Link	Providers	Tags
https://device.harmonyos.com/en/docs/security/update/security-bulletins-202212-0000001462975397		PatchVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-49130		Advisory