CVE-2022-38700 — HIGH (8.8)

Vulnerability Description

OpenHarmony-v3.1.1 and prior versions have a permission bypass vulnerability. LAN attackers can bypass permission control and get control of camera service.

CVSS Score

8.8

HIGH

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Openharmony	Openharmony	3.1.1

Related Weaknesses (CWE)

CWE-305 CWE-287

References

https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2022/2Third Party Advisory
https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2022/2Third Party Advisory

FAQ

What is CVE-2022-38700?

CVE-2022-38700 is a vulnerability with a CVSS score of 8.8 (HIGH). OpenHarmony-v3.1.1 and prior versions have a permission bypass vulnerability. LAN attackers can bypass permission control and get control of camera service.

How severe is CVE-2022-38700?

CVE-2022-38700 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-38700?

Check the references section above for vendor advisories and patch information. Affected products include: Openharmony Openharmony.