CVE-2025-2188 - Vulnerability Details - OpenCVE

There is a whitelist mechanism bypass in GameCenter ,successful exploitation of this vulnerability may affect service confidentiality and integrity.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact None

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

Vendors	Products
Honor	Gamecenter

Configuration 1 [-]

cpe:2.3:a:honor:gamecenter:*:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://www.honor.com/global/security/cve-2025-2188/

History

Sat, 12 Jul 2025 13:45:00 +0000

Type	Values Removed	Values Added
Metrics	epss `{'score': 0.00041}`	epss `{'score': 0.00043}`

Fri, 11 Jul 2025 13:45:00 +0000

Type	Values Removed	Values Added
First Time appeared		Honor Honor gamecenter
CPEs		cpe:2.3:a:honor:gamecenter::::::::
Vendors & Products		Honor Honor gamecenter

Thu, 17 Apr 2025 18:15:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-290

Thu, 17 Apr 2025 16:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Thu, 17 Apr 2025 09:45:00 +0000

Type	Values Removed	Values Added
Description		There is a whitelist mechanism bypass in GameCenter ,successful exploitation of this vulnerability may affect service confidentiality and integrity.
Title		Whitelist bypass Vulnerability in GameCenter
References		https://www.honor.com/global/security/cve-2025-2188/
Metrics		cvssV3_1 `{'score': 8.1, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N'}`

MITRE

Status: PUBLISHED

Assigner: Honor

Published: 2025-04-17T09:28:58.004Z

Updated: 2025-04-17T17:47:58.371Z

Reserved: 2025-03-11T03:51:59.522Z

Link: CVE-2025-2188

Vulnrichment

Updated: 2025-04-17T15:57:50.328Z

NVD

Status : Analyzed

Published: 2025-04-17T10:15:15.693

Modified: 2025-07-11T13:33:50.090

Link: CVE-2025-2188

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-2188", "assignerOrgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4", "state": "PUBLISHED", "assignerShortName": "Honor", "dateReserved": "2025-03-11T03:51:59.522Z", "datePublished": "2025-04-17T09:28:58.004Z", "dateUpdated": "2025-04-17T17:47:58.371Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "com.hihonor.gamecenter", "vendor": "Honor", "versions": [{"lessThan": "16.0.23.304", "status": "affected", "version": "16.0.23", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\">There is a whitelist mechanism bypass in GameCenter ,successful exploitation of this vulnerability may affect service confidentiality and integrity.</span>"}], "value": "There is a whitelist mechanism bypass in GameCenter ,successful exploitation of this vulnerability may affect service confidentiality and integrity."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "providerMetadata": {"orgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4", "shortName": "Honor", "dateUpdated": "2025-04-17T09:29:06.666Z"}, "references": [{"url": "https://www.honor.com/global/security/cve-2025-2188/"}], "source": {"discovery": "UNKNOWN"}, "title": "Whitelist bypass Vulnerability in GameCenter", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-290", "lang": "en", "description": "CWE-290 Authentication Bypass by Spoofing"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-04-17T15:50:43.979940Z", "id": "CVE-2025-2188", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-04-17T17:47:58.371Z"}}]}}

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-2188", "assignerOrgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4", "state": "PUBLISHED", "assignerShortName": "Honor", "dateReserved": "2025-03-11T03:51:59.522Z", "datePublished": "2025-04-17T09:28:58.004Z", "dateUpdated": "2025-04-17T17:47:58.371Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "com.hihonor.gamecenter", "vendor": "Honor", "versions": [{"lessThan": "16.0.23.304", "status": "affected", "version": "16.0.23", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\">There is a whitelist mechanism bypass in GameCenter ,successful exploitation of this vulnerability may affect service confidentiality and integrity.</span>"}], "value": "There is a whitelist mechanism bypass in GameCenter ,successful exploitation of this vulnerability may affect service confidentiality and integrity."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "providerMetadata": {"orgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4", "shortName": "Honor", "dateUpdated": "2025-04-17T09:29:06.666Z"}, "references": [{"url": "https://www.honor.com/global/security/cve-2025-2188/"}], "source": {"discovery": "UNKNOWN"}, "title": "Whitelist bypass Vulnerability in GameCenter", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-2188", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-04-17T15:50:43.979940Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-290", "description": "CWE-290 Authentication Bypass by Spoofing"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-04-17T15:57:50.328Z"}}]}}