Malicious App Management Flaw in iAware Module by Huawei
CVE-2022-39000
9.8CRITICAL
Summary
The iAware module developed by Huawei contains a security flaw that compromises the management of malicious applications. Exploiting this vulnerability allows a malicious app to automatically execute during system startup, potentially putting user data and device integrity at risk. This security issue necessitates immediate attention from users to mitigate potential threats and maintain device security.
Affected Version(s)
EMUI 12.0.0
EMUI 11.0.1
EMUI 11.0.0
References
CVSS V3.1
Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved