CVE-2022-31760

moderate-risk

Published 2022-06-13

Dialog boxes can still be displayed even if the screen is locked in carrier-customized USSD services. Successful exploitation of this vulnerability may affect data integrity and confidentiality.

Do I need to act?

0.13% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 9.1/10 Critical

NETWORK / LOW complexity

Affected Products (8)

Emui

Harmonyos

Magic Ui

Affected Vendors

Huawei

References (4)

Vendor Advisory https://consumer.huawei.com/en/support/bulletin/2022/6/

Vendor Advisory https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-2...

Vendor Advisory https://consumer.huawei.com/en/support/bulletin/2022/6/

Vendor Advisory https://device.harmonyos.com/en/docs/security/update/security-bulletins-phones-2...

/ 100

moderate-risk

Severity 31/34 · Critical

Exploitability 1/34 · Minimal

Exposure 14/34 · Moderate