{"id":"CVE-2022-48470","aliases":["EUVD-2022-51166","GHSA-34m9-46jh-jxm4"],"status":"published","title":"Huawei HiLink AI Life product has an identity authentication bypass vulnerability. Successful...","description":"Huawei HiLink AI Life product has an identity authentication bypass vulnerability. Successful exploitation of this vulnerability may allow attackers to access restricted functions.(Vulnerability ID:HWPSIRT-2022-42291)\n\nThis vulnerability has been assigned a (CVE)ID:CVE-2022-48470","severity":{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00142,"percentile":0.036,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-305"],"published":"2024-12-28T06:53:40Z","modified":"2026-06-17T05:15:29Z","products":[{"vendor":"huawei","product":"harmonyos ailife solution 6.0"},{"vendor":"huawei","product":"hilink_ai_life"}],"references":[{"url":"https://www.huawei.com/en/psirt/security-advisories/2023/huawei-sa-iabvihhalp-ea34d670-en","tags":["Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-48470"},{"url":"https://github.com/advisories/GHSA-34m9-46jh-jxm4"}],"sources":{"cve":[{"id":"CVE-2022-48470","description":"Huawei HiLink AI Life product has an identity authentication bypass vulnerability. Successful exploitation of this vulnerability may allow attackers to access restricted functions.(Vulnerability ID:HWPSIRT-2022-42291)\n\nThis vulnerability has been assigned a (CVE)ID:CVE-2022-48470","status":"published","published":"2024-12-28T06:53:40.31Z","modified":"2024-12-28T16:20:26.737Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-305"],"updated_at":"2026-11-02T14:34:33.574107Z"}],"euvd":[{"id":"EUVD-2022-51166","description":"Huawei HiLink AI Life product has an identity authentication bypass vulnerability. Successful exploitation of this vulnerability may allow attackers to access restricted functions.(Vulnerability ID:HWPSIRT-2022-42291)\n\nThis vulnerability has been assigned a (CVE)ID:CVE-2022-48470","status":"published","published":"2024-12-28T06:53:40Z","modified":"2024-12-28T16:20:26Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"updated_at":"2026-11-03T00:04:32.209772Z"}],"ghsa":[{"id":"GHSA-34m9-46jh-jxm4","title":"Huawei HiLink AI Life product has an identity authentication bypass vulnerability. Successful...","description":"Huawei HiLink AI Life product has an identity authentication bypass vulnerability. Successful exploitation of this vulnerability may allow attackers to access restricted functions.(Vulnerability ID:HWPSIRT-2022-42291)\n\nThis vulnerability has been assigned a (CVE)ID:CVE-2022-48470","status":"published","published":"2024-12-28T09:31:28Z","modified":"2024-12-28T09:31:34Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium"}],"cwes":["CWE-305"],"updated_at":"2026-11-02T14:59:17.039565Z"}],"nvd":[{"id":"CVE-2022-48470","description":"Huawei HiLink AI Life product has an identity authentication bypass vulnerability. Successful exploitation of this vulnerability may allow attackers to access restricted functions.(Vulnerability ID:HWPSIRT-2022-42291)\n\nThis vulnerability has been assigned a (CVE)ID:CVE-2022-48470","status":"published","published":"2024-12-28T07:15:19.087Z","modified":"2026-06-17T05:15:29.413Z","cvss":[{"version":"3.1","score":4,"vector":"CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L","level":"medium","assessor":"secondary"}],"cwes":["CWE-305"],"updated_at":"2026-11-02T14:07:40.977475Z"}]}}