Huawei HarmonyOS Path Traversal Vulnerability in DFS Module

Vulnerability

A path traversal vulnerability has been identified in the DFS module of Huawei's HarmonyOS. This vulnerability allows for unauthorized access to files and directories, potentially leading to the exposure of sensitive information. It affects HarmonyOS 5.0.0.

Impact

Exploitation of this vulnerability could result in unauthorized access to confidential service information.

Remediation

Users can refer to the Huawei Security Bulletin for April 2025 for guidance on applying the latest security updates, which include patches for this vulnerability.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
7.8
impact
2.5
exploitability
2.8
remediation
7.7
relevance
0.0
threat
0.0
urgency
2.9
incentive
0.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.