PcManager includes a privilege bypass flaw that prevents the software from enforcing proper authorization checks. Based on the description, it is inferred that an attacker who exploits this vulnerability could gain elevated privileges, allow unauthorized configuration changes, and potentially disrupt the service availability of the device management platform.

The affected product is Honor's PcManager, a device management platform. No specific version ranges are supplied in the public advisory, so all releases that contain the unpatched code may be vulnerable until further vendor details are provided.

The advisory assigns a CVSS score of 3.2, indicating low severity, and an EPSS score of less than 1%, reflecting a very low likelihood of exploitation. The vulnerability is not listed in the CISA KEV catalog. The likely attack vector is local or requires user interaction, as remote exploitation is not documented.