Vulnerability · Published Feb 27, 2023 · Assigned by huawei
CVE-2022-48284
Critical 9.8
In plain English
A critical-severity privilege mismanagement in HarmonyOS AILife Solution 6.0. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 41% of all known vulnerabilities).
Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)0.5%top 59.0% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A piece of Huawei whole-home intelligence software has an Incorrect Privilege Assignment vulnerability. Successful exploitation of this vulnerability could allow attackers to access restricted functions.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | HarmonyOS AILife Solution 6.0 | HiLink AI Life 12.0.2.305 |
Weakness: CWE-269 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H