A flaw in the permission management of Huawei HarmonyOS’s network management module permits an attacker to alter or bypass the normal access controls governing configuration changes. The vulnerability can lead to unauthorized modifications of network settings, thereby compromising the integrity of services that rely on those settings. (This impact description is based solely on the official CVE narrative and not on any additional source.)

The vulnerability is tied to Huawei HarmonyOS. No product variant or version numbers are specified in the CNA data, indicating that any installation of HarmonyOS may be affected until a corrective update is applied.

The CVSS score of 6.3 reflects a medium severity risk. The EPSS score is not available, and the vulnerability is not listed in CISA’s KEV catalog. The likely attack vector is local or privileged access to the network management module, but this assumption is derived from the description rather than an explicit statement in the advisory. If exploited, an attacker could adjust configuration parameters that alter the expected behavior of network services.