CVE-2022-48491

MEDIUM

HUAWEI EMUI - Missing Authorization

Title source: llm
STIX 2.1

Description

Vulnerability of missing authentication on certain HUAWEI phones.Successful exploitation of this vulnerability can lead to ads and other windows to display at any time.

References (1)

Core 1

Scores

CVSS v3 5.3
EPSS 0.0009
EPSS Percentile 25.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-862
Status published
Products (4)
huawei/emui 11.0.1
huawei/emui 12.0.0
huawei/emui 12.0.1
huawei/emui 13.0.0
Published Jun 19, 2023
Tracked Since Feb 18, 2026