Permission Management Vulnerability in Huawei Wearables
CVE-2021-37000

7.7HIGH

Key Information:

Vendor
Huawei
Status
Vendor
CVE Published:
28 December 2024

Summary

A notable vulnerability has been identified in certain Huawei wearable devices concerning their permission management system. This issue could allow unauthorized access or manipulation of device functionality, potentially compromising the user experience and overall security. Users of affected Huawei wearables should remain vigilant about device permissions and updates to ensure their devices are secure against potential exploits. This vulnerability highlights the importance of robust permission management in wearable technology, as it plays a crucial role in safeguarding sensitive user data.

Affected Version(s)

HarmonyOS 2.0

References

CVSS V3.1

Score:
7.7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.