CVE-2022-38700

HIGH

OpenHarmony <v3.1.1 - Privilege Escalation

Title source: llm
STIX 2.1

Description

OpenHarmony-v3.1.1 and prior versions have a permission bypass vulnerability. LAN attackers can bypass permission control and get control of camera service.

Scores

CVSS v3 8.8
EPSS 0.0010
EPSS Percentile 27.8%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-305 CWE-287
Status published
Products (1)
openharmony/openharmony 3.1.1
Published Sep 09, 2022
Tracked Since Feb 18, 2026