CVE-2022-42488

 

Published at: - 14-10-2022 05:16

Last modified: - 17-10-2022 09:02

Total changes: - 2

Description

OpenHarmony-v3.1.2 and prior versions have a Missing permission validation vulnerability in param service of startup subsystem. An malicious application installed on the device could elevate its privileges to the root user, disable security features, or cause DoS by disabling particular services.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

 

Verification logic

 

Reference

• https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2022/2022-10.md

 

Keywords

NVD

 

CVE-2022-42488

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures