1. Home
  2. CVE Database
  3. CVE-2022-45118
MEDIUM · 6.2

CVE-2022-45118

OpenHarmony-v3.1.2 and prior versions had a vulnerability that telephony in communication subsystem sends public events with personal data, but the permission is not set. Malicious apps could listen t...

Vulnerability Description

OpenHarmony-v3.1.2 and prior versions had a vulnerability that telephony in communication subsystem sends public events with personal data, but the permission is not set. Malicious apps could listen to public events and obtain information such as mobile numbers and SMS data without permissions.

CVSS Score

6.2

MEDIUM

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
OpenharmonyOpenharmony>= 3.1, <= 3.1.4

Related Weaknesses (CWE)

CWE-287CWE-276

References

FAQ

What is CVE-2022-45118?

CVE-2022-45118 is a vulnerability with a CVSS score of 6.2 (MEDIUM). OpenHarmony-v3.1.2 and prior versions had a vulnerability that telephony in communication subsystem sends public events with personal data, but the permission is not set. Malicious apps could listen t...

How severe is CVE-2022-45118?

CVE-2022-45118 has been rated MEDIUM with a CVSS base score of 6.2/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-45118?

Check the references section above for vendor advisories and patch information. Affected products include: Openharmony Openharmony.