Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-j43q-9x66-wv6c

Опубликовано: 14 окт. 2022
Источник: github
Github: Не прошло ревью
CVSS3: 8.8

Описание

OpenHarmony-v3.1.2 and prior versions have an authenication bypass vulnerability in a callback handler function of Softbus_server in communication subsystem. Attackers can launch attacks on distributed networks by sending Bluetooth rfcomm packets to any remote device and executing arbitrary commands.

OpenHarmony-v3.1.2 and prior versions have an authenication bypass vulnerability in a callback handler function of Softbus_server in communication subsystem. Attackers can launch attacks on distributed networks by sending Bluetooth rfcomm packets to any remote device and executing arbitrary commands.

EPSS

Процентиль: 29%
0.00103
Низкий

8.8 High

CVSS3

Дефекты

CWE-287

Связанные уязвимости

CVSS3: 8.3
nvd
больше 3 лет назад

OpenHarmony-v3.1.2 and prior versions have an authenication bypass vulnerability in a callback handler function of Softbus_server in communication subsystem. Attackers can launch attacks on distributed networks by sending Bluetooth rfcomm packets to any remote device and executing arbitrary commands.

EPSS

Процентиль: 29%
0.00103
Низкий

8.8 High

CVSS3

Дефекты

CWE-287