CVE-2022-44548

There is a vulnerability in permission verification during the Bluetooth pairing process. Successful exploitation of this vulnerability may cause the dialog box for confirming the pairing not to be displayed during Bluetooth pairing.

CVSS v3 4.3 MEDIUM

4.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector ADJACENT_NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://consumer.huawei.com/en/support/bulletin/2022/11/	Vendor Advisory
https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202211-0000001441016433	Vendor Advisory
https://consumer.huawei.com/en/support/bulletin/2022/11/	Vendor Advisory
https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202211-0000001441016433	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:huawei:harmonyos:2.0:::::::*
	cpe:2.3:o:huawei:harmonyos:2.1:::::::*
	cpe:2.3:o:huawei:harmonyos:3.0.0:::::::*

Configuration 2 (hide)

OR	cpe:2.3:o:huawei:emui:11.0.1:::::::*
	cpe:2.3:o:huawei:emui:12.0.0:::::::*
	cpe:2.3:o:huawei:emui:12.0.1:::::::*

History

21 Nov 2024, 07:28

Type	Values Removed	Values Added
References	~~() https://consumer.huawei.com/en/support/bulletin/2022/11/ - Vendor Advisory~~	() https://consumer.huawei.com/en/support/bulletin/2022/11/ - Vendor Advisory
References	~~() https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202211-0000001441016433 - Vendor Advisory~~	() https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202211-0000001441016433 - Vendor Advisory

Information

Published : 2022-11-09 21:15

Updated : 2025-05-01 15:15

NVD link : CVE-2022-44548

Mitre link : CVE-2022-44548

CVE.ORG link : CVE-2022-44548

JSON object : View

Products Affected

huawei

emui
harmonyos

CWE

CWE-276

Incorrect Default Permissions

{"id": "CVE-2022-44548", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 2.8}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 2.8}]}, "published": "2022-11-09T21:15:18.067", "references": [{"url": "https://consumer.huawei.com/en/support/bulletin/2022/11/", "tags": ["Vendor Advisory"], "source": "psirt@huawei.com"}, {"url": "https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202211-0000001441016433", "tags": ["Vendor Advisory"], "source": "psirt@huawei.com"}, {"url": "https://consumer.huawei.com/en/support/bulletin/2022/11/", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202211-0000001441016433", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-276"}]}, {"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-276"}]}], "descriptions": [{"lang": "en", "value": "There is a vulnerability in permission verification during the Bluetooth pairing process. Successful exploitation of this vulnerability may cause the dialog box for confirming the pairing not to be displayed during Bluetooth pairing."}, {"lang": "es", "value": "Existe una vulnerabilidad en la verificaci\u00f3n de permisos durante el proceso de emparejamiento de Bluetooth. La explotaci\u00f3n exitosa de esta vulnerabilidad puede hacer que el cuadro de di\u00e1logo para confirmar el emparejamiento no se muestre durante el emparejamiento de Bluetooth."}], "lastModified": "2025-05-01T15:15:56.697", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:huawei:harmonyos:2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3AD62E8B-CB4B-43A6-98E8-09A8A1A3505B"}, {"criteria": "cpe:2.3:o:huawei:harmonyos:2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BCE0AFB0-A112-484B-BEAD-A7F1BDDCE313"}, {"criteria": "cpe:2.3:o:huawei:harmonyos:3.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CB3751C1-7729-41D3-AE50-80B5AF601135"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:huawei:emui:11.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "511F8CE2-C2B6-4A08-B992-49D9B75B8655"}, {"criteria": "cpe:2.3:o:huawei:emui:12.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A974CA73-84E8-480B-BB4C-4A81D0C985B2"}, {"criteria": "cpe:2.3:o:huawei:emui:12.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2DF07E7F-3A18-4B74-B73D-DF3647C2A48F"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@huawei.com"}