{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-08-02T19:15:52.791","vulnerabilities":[{"cve":{"id":"CVE-2022-37008","sourceIdentifier":"psirt@huawei.com","published":"2022-08-10T20:16:04.967","lastModified":"2026-06-17T04:54:27.423","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"The recovery module has a vulnerability of bypassing the verification of an update package before use. Successful exploitation of this vulnerability may affect system stability."},{"lang":"es","value":"El módulo recovery presenta una vulnerabilidad de omisión de verificación de un paquete de actualización antes de su uso. Una explotación con éxito de esta vulnerabilidad puede afectar la estabilidad del sistema"}],"affected":[{"source":"psirt@huawei.com","affectedData":[{"vendor":"Huawei","product":"HarmonyOS","versions":[{"version":"2.0","status":"affected"}]},{"vendor":"Huawei","product":"EMUI","versions":[{"version":"12.0.0","status":"affected"},{"version":"11.0.1","status":"affected"},{"version":"11.0.0","status":"affected"}]},{"vendor":"Huawei","product":"Magic UI","versions":[{"version":"4.0.0","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"NONE","availabilityImpact":"HIGH"},"exploitabilityScore":3.9,"impactScore":3.6}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2026-03-03T19:41:43.143927Z","id":"CVE-2022-37008","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-345"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-345"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:emui:11.0.0:*:*:*:*:*:*:*","matchCriteriaId":"0B701EC6-8208-4D22-95A6-B07D471A8A8B"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:emui:11.0.1:*:*:*:*:*:*:*","matchCriteriaId":"511F8CE2-C2B6-4A08-B992-49D9B75B8655"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:emui:12.0.0:*:*:*:*:*:*:*","matchCriteriaId":"A974CA73-84E8-480B-BB4C-4A81D0C985B2"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:harmonyos:2.0:*:*:*:*:*:*:*","matchCriteriaId":"3AD62E8B-CB4B-43A6-98E8-09A8A1A3505B"},{"vulnerable":true,"criteria":"cpe:2.3:o:huawei:magic_ui:4.0.0:*:*:*:*:*:*:*","matchCriteriaId":"F6066FAB-23F5-4CB2-B89E-B00F8835AC39"}]}]}],"references":[{"url":"https://consumer.huawei.com/en/support/bulletin/2022/8/","source":"psirt@huawei.com","tags":["Vendor Advisory"]},{"url":"https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202208-0000001363876177","source":"psirt@huawei.com","tags":["Vendor Advisory"]},{"url":"https://consumer.huawei.com/en/support/bulletin/2022/8/","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]},{"url":"https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-202208-0000001363876177","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"]}]}}]}