CVE-2022-41579

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

There is an insufficient authentication vulnerability in some Huawei band products. Successful exploit could allow the attacker to spoof then connect to the band.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Weakness enumeration

CWE-287

Affected software

VendorProductVersions
HuaweiHOTA-Fara-B1911.1.2.40-fullpackage-OTA

References

Timeline

Published
Dec 28, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-41587.5The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cg_Fields POST CVE-2022-415809.8The HW_KEYMASTER module has a vulnerability of not verifying the data read.Successful exploitation of this vulnerability may cause maliciousCVE-2022-415819.1The HW_KEYMASTER module has a vulnerability of not verifying the data read.Successful exploitation of this vulnerability may cause maliciousCVE-2022-415827.5The security module has configuration defects.Successful exploitation of this vulnerability may affect system availability.CVE-2022-415837.5The storage maintenance and debugging module has an array out-of-bounds read vulnerability.Successful exploitation of this vulnerability wilCVE-2022-415847.8The kernel module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause memory overwriting.CVE-2022-415857.8The kernel module has an out-of-bounds read vulnerability.Successful exploitation of this vulnerability may cause memory overwriting.CVE-2022-415867.5The communication framework module has a vulnerability of not truncating data properly.Successful exploitation of this vulnerability may affCVE-2022-415875.3Uncaptured exceptions in the home screen module. Successful exploitation of this vulnerability may affect stability.CVE-2022-415887.5The home screen module has a vulnerability in service logic processing.Successful exploitation of this vulnerability may affect data integriCVE-2022-415897.5The DFX unwind stack module of the ArkCompiler has a vulnerability in interface calling.Successful exploitation of this vulnerability affectCVE-2022-41596.5The Contest Gallery WordPress plugin before 19.1.5.1, Contest Gallery Pro WordPress plugin before 19.1.5.1 do not escape the cg_id POST para
CVE-2022-41579: Medium severity, CVSS 6.5 | Vulnix