A permission control flaw exists in the cellular_data module of Huawei HarmonyOS. The vulnerability allows a malicious actor to manipulate cellular data access permissions, potentially causing a denial of service on the device’s connectivity. The weakness is a classic example of insufficient authorization checks, as identified by CWE‑264.

The flaw affects Huawei HarmonyOS operating systems, specifically versions 5.1.0 and 6.0.0. It is documented for all product lines that ship with these OS releases, including phones, laptops, smart TVs, and wearables.

The CVSS score of 4.0 represents moderate severity, while the EPSS score of less than 1% indicates a very low probability of exploitation at the time of this analysis. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector is local or device‑based: an attacker with the ability to install or modify applications with elevated privileges can exploit the permission control flaw to disrupt cellular connectivity. Due to the potential impact on availability, the risk to affected users warrants timely remediation.