CVE-2022-38700

OpenHarmony-v3.1.1 and prior versions have a permission bypass vulnerability. LAN attackers can bypass permission control and get control of camera service.

Score

CVSS 3.1 8.8 High

Status

Modified - scy@openharmony.io

Published

2022-09-09

Last modified

2024-09-16

Weaknesses

CWE-287, CWE-305

Affected products

• Openharmony (Openharmony)

References

• https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2022/2022-09.md