Vulnerabilities

TI-2022-21283 CVE-2022-43495 · GHSA-mgr9-pm96-3xmm

An abnormal packet recieved when distributedhardware_device_manager joining a network could cause a device reboot.

LOW 34

OpenHarmony-v3.1.2 and prior versions had a DOS vulnerability in distributedhardware_device_manager when joining a network.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00803 Published 2022-11-03 No fix listed CWE-476

TI-2022-21241 CVE-2022-43449 · GHSA-7c72-6v53-xq93

LOW 27

OpenHarmony-v3.1.2 and prior versions had an Arbitrary file read vulnerability via download_server.

CVSS 3.1MEDIUM 6.2 Local No auth No interaction EPSS 0.00191 Published 2022-11-03 No fix listed CWE-20

TI-2022-21243 CVE-2022-43451 · GHSA-pmwg-pqhj-8m9m

LOW 36

OpenHarmony-v3.1.2 and prior versions had an Multiple path traversal vulnerability in appspawn and nwebspawn services.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.002 Published 2022-11-03 No fix listed CWE-287