CVE-2022-48470

MediumCVSS 4.0/10Last modified Jun 17, 2026

Description

Huawei HiLink AI Life product has an identity authentication bypass vulnerability. Successful exploitation of this vulnerability may allow attackers to access restricted functions.(Vulnerability ID:HWPSIRT-2022-42291)

This vulnerability has been assigned a (CVE)ID:CVE-2022-48470

Metrics

CVSS 3.1 4.0/10CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L

Weakness enumeration

CWE-305

Affected software

Vendor	Product	Versions
Huawei	HarmonyOS AILife Solution 6.0	HiLink AI Life 12.0.2.305

References

https://www.huawei.com/en/psirt/security-advisories/2023/huawei-sa-iabvihhalp-ea34d670-enVendor Advisory

Timeline

Published: Dec 28, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2022

CVE-2022-484717.5There is a misinterpretation of input vulnerability in Huawei Printer. Successful exploitation of this vulnerability may cause the printer s CVE-2022-484729.8A Huawei printer has a system command injection vulnerability. Successful exploitation could lead to remote code execution. Affected product CVE-2022-484737.5There is a misinterpretation of input vulnerability in Huawei Printer. Successful exploitation of this vulnerability may cause the printer s CVE-2022-484747.5Control de Ciber, in its 1.650 version, is affected by a Denial of Service condition through the version function. Sending a malicious reque CVE-2022-484758.8Buffer Overflow vulnerability in Control de Ciber version 1.650, in the printing function. Sending a modified request by the attacker could CVE-2022-484767.5In JetBrains Ktor before 2.3.0 path traversal in the `resolveResource` method was possible CVE-2022-484779.8In JetBrains Hub before 2023.1.15725 SSRF protection in Auth Module integration was missing CVE-2022-484789.8The facial recognition TA of some products lacks memory length verification. Successful exploitation of this vulnerability may cause excepti CVE-2022-484799.8The facial recognition TA of some products has the out-of-bounds memory read vulnerability. Successful exploitation of this vulnerability ma CVE-2022-48485.7Improper Verification of Source of a Communication Channel in GitHub repository usememos/memos prior to 0.9.1.CVE-2022-484807.5Integer overflow vulnerability in some phones. Successful exploitation of this vulnerability may affect service confidentiality.CVE-2022-484817.8In JetBrains Toolbox App before 1.28 a DYLIB injection on macOS was possible