CVE-2022-32144

HighCVSS 8.6/10Last modified Jun 17, 2026

Description

There is an insufficient input verification vulnerability in Huawei product. Successful exploitation of this vulnerability may lead to service abnormal. (Vulnerability ID: HWPSIRT-2022-76192)

This vulnerability has been assigned a Common Vulnerabilities and Exposures (CVE) ID: CVE-2022-32144.

Metrics

CVSS 3.1 8.6/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

Weakness enumeration

CWE-20CWE-346

Affected software

No affected versions have been published.

Timeline

Published
Dec 20, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2022

CVE-2022-321456.1A vulnerability has been identified in Teamcenter Active Workspace V5.2 (All versions < V5.2.9), Teamcenter Active Workspace V6.0 (All versiCVE-2022-321486.5Improper exposure of client IP addresses in net/http before Go 1.17.12 and Go 1.18.4 can be triggered by calling httputil.ReverseProxy.ServeCVE-2022-321497.5An attacker may cause a denial of service by crafting an Accept-Language header which ParseAcceptLanguage will take significant time to parsCVE-2022-32157.5NIOHTTP1 and projects using it for generating HTTP responses can be subject to a HTTP Response Injection attack. This occurs when a HTTP/1.1CVE-2022-321519.1The httplib and urllib Python libraries that Splunk shipped with Splunk Enterprise did not validate certificates using the certificate authoCVE-2022-321527.2Splunk Enterprise peers in Splunk Enterprise versions before 9.0 and Splunk Cloud Platform versions before 8.2.2203 did not validate the TLSCVE-2022-321538.1Splunk Enterprise peers in Splunk Enterprise versions before 9.0 and Splunk Cloud Platform versions before 8.2.2203 did not validate the TLSCVE-2022-321548.1Dashboards in Splunk Enterprise versions before 9.0 might let an attacker inject risky search commands into a form token when the token is uCVE-2022-321557.5In universal forwarder versions before 9.0, management services are available remotely by default. When not required, it introduces a potentCVE-2022-321568.1In Splunk Enterprise and Universal Forwarder versions before 9.0, the Splunk command-line interface (CLI) did not validate TLS certificates CVE-2022-321577.5Splunk Enterprise deployment servers in versions before 9.0 allow unauthenticated downloading of forwarder bundles. Remediation requires youCVE-2022-3215810.0Splunk Enterprise deployment servers in versions before 8.1.10.1, 8.2.6.1, and 9.0 let clients deploy forwarder bundles to other deployment
CVE-2022-32144: High severity, CVSS 8.6 | Vulnix