Path Traversal Vulnerability in Huawei Aslan Children's Watch
CVE-2022-44564

7.8HIGH

Key Information:

Vendor
Huawei
Status
Aslan-al10
Vendor
CVE Published:
28 December 2022

Summary

The Huawei Aslan Children's Watch contains a path traversal vulnerability that can be exploited by malicious users. This flaw enables unauthorized access to sensitive system resources, potentially allowing attackers to modify or retrieve protected information within the device's system. Affected users are advised to implement security measures to mitigate risks associated with this vulnerability.

Affected Version(s)

Aslan-AL10 11.1.0.118(C00M06)-11.1.0.10118(C00M06)

References

https://www.huawei.com/en/psirt/security-advisories/huawe...

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.