CVE-2022-48470

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-48470
Huawei HiLink AI Life product has an identity authentication bypass vulnerability. Successful exploitation of this vulnerability may allow attackers to access restricted functions.(Vulnerability ID:HWPSIRT-2022-42291) This vulnerability has been assigned a (CVE)ID:CVE-2022-48470

4.0 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.4 / Impact : 2.5

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact LOW

Scope UNCHANGED

References
Link Resource
https://www.huawei.com/en/psirt/security-advisories/2023/huawei-sa-iabvihhalp-ea34d670-en Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:huawei:hilink_ai_life:12.0.2.305:*:*:*:*:*:*:*
History

09 Dec 2025, 20:35

Type Values Removed Values Added
CPE cpe:2.3:a:huawei:hilink_ai_life:12.0.2.305:*:*:*:*:*:*:*
First Time Huawei
Huawei hilink Ai Life
References () https://www.huawei.com/en/psirt/security-advisories/2023/huawei-sa-iabvihhalp-ea34d670-en - () https://www.huawei.com/en/psirt/security-advisories/2023/huawei-sa-iabvihhalp-ea34d670-en - Vendor Advisory
Summary
  • (es) El producto Huawei HiLink AI Life tiene una vulnerabilidad de omisión de autenticación de identidad. La explotación exitosa de esta vulnerabilidad puede permitir a los atacantes acceder a funciones restringidas. (ID de vulnerabilidad: HWPSIRT-2022-42291) A esta vulnerabilidad se le ha asignado un ID (CVE): CVE-2022-48470

28 Dec 2024, 07:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-12-28 07:15

Updated : 2025-12-09 20:35

NVD link : CVE-2022-48470

Mitre link : CVE-2022-48470

CVE.ORG link : CVE-2022-48470

JSON object : View

Products Affected

huawei

  • hilink_ai_life
CWE
CWE-305

Authentication Bypass by Primary Weakness