Huawei has disclosed a permission control vulnerability in the manufacturability design module of HarmonyOS. Based on the description, it is inferred that the flaw allows bypassing predefined access restrictions. The weakness is classified as CWE-840, which denotes a privilege escalation or permission bypass issue. Based on the description, it is inferred that the vulnerability could cause a denial of service by disrupting availability of functions that rely on the module. Based on the description, it is inferred that the bypass could be achieved when an attacker possesses local device access or elevated privileges, enabling manipulation of the module's access controls.

The affected product is Huawei HarmonyOS. No specific version is listed; all devices running the current HarmonyOS release containing the manufacturability design module may be vulnerable. Refer to the Huawei consumer bulletin for details on affected firmware.

The CVSS score of 5.9 reflects moderate severity. The EPSS score is unavailable, and the vulnerability is not listed in the CISA KEV catalog, indicating no known active exploitation. Based on the description, it is inferred that an attacker would need local device access or privileged permissions to manipulate the manufacturability design module, which could result in service disruption.