Technical impact
A race condition exists in the HarmonyOS maintenance and diagnostics module that can lead to an interruption of service availability. Exploitation does not enable code execution, data disclosure, or privilege escalation; it primarily disrupts the normal functioning of the affected module.
Affected Systems
The vulnerability is present in Huawei HarmonyOS versions 5.1.0 and 6.0.0, which are used on a range of consumer devices, including smartphones, laptops, and wearables.
Risk and Exploitability
The CVSS score of 4.4 indicates a medium impact. The EPSS score of less than 1 % and lack of inclusion in the KEV catalog suggest a low probability of exploitation in the wild. The attack likely requires access to the maintenance and diagnostics functions, possibly through local or privileged remote interfaces, and would cause only a denial-of-service condition rather than more severe consequences.
