Description
Permission control vulnerability in the manufacturability design module. Impact: Successful exploitation of this vulnerability may affect availability.
Published: 2026-05-15
Score: 5.9 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

This vulnerability is a permission control flaw in the manufacturability design module of Huawei HarmonyOS, identified as CWE-840. If exploited, an attacker could potentially interfere with the normal availability of the system by abusing elevated permissions granted to the module. The official description indicates that a successful exploit may affect availability, but does not detail the exact consequences beyond this disruption.

Affected Systems

Huawei HarmonyOS. No specific affected version information is provided by the CNA data.

Risk and Exploitability

The CVSS score of 5.9 classifies the issue as moderate severity. The EPSS score is not available, and the vulnerability is not listed in CISA’s KEV catalog. Attack vector details are not disclosed; it is likely that exploitation would require access to the manufacturability design module, potentially through local or privileged channels. Overall risk is moderate, with limited evidence of active exploitation at this time.

Generated by OpenCVE AI on May 15, 2026 at 11:52 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply any available Huawei patch that addresses the permission control issue.
  • Restrict permissions for the manufacturability design module to only those users or processes that absolutely require them, following the principle of least privilege.
  • If the manufacturability design module is not essential for operation, disable or remove it temporarily and monitor system logs for suspicious activity.
  • Monitor logs and system behavior for signs of unauthorized access or anomalous activity from the manufacturability design module.

Generated by OpenCVE AI on May 15, 2026 at 11:52 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 15 May 2026 12:15:00 +0000

Type Values Removed Values Added
Title Manufacturability Design Module Permission Control Vulnerability

Fri, 15 May 2026 11:45:00 +0000

Type Values Removed Values Added
First Time appeared Huawei
Huawei harmonyos
Vendors & Products Huawei
Huawei harmonyos

Fri, 15 May 2026 11:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Fri, 15 May 2026 10:00:00 +0000

Type Values Removed Values Added
Description Permission control vulnerability in the manufacturability design module. Impact: Successful exploitation of this vulnerability may affect availability.
Weaknesses CWE-840
References
Metrics cvssV3_1

{'score': 5.9, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L'}


Subscriptions

Huawei Harmonyos
cve-icon MITRE

Status: PUBLISHED

Assigner: huawei

Published:

Updated: 2026-05-15T10:55:38.997Z

Reserved: 2026-04-23T01:42:44.928Z

Link: CVE-2026-41967

cve-icon Vulnrichment

Updated: 2026-05-15T10:54:28.041Z

cve-icon NVD

Status : Deferred

Published: 2026-05-15T10:16:35.420

Modified: 2026-05-15T14:08:50.797

Link: CVE-2026-41967

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-05-15T12:00:16Z

Weaknesses