The vulnerability is a permission control flaw in Huawei’s HarmonyOS print module that can lead to tampering with printed data and exposure of information passing through the print stream. It corresponds to CWE-701, which indicates that operations are not adequately restricted to a user’s authorized capabilities. This flaw could allow an attacker to alter or intercept printed documents, compromising both the integrity of the data and the confidentiality of sensitive material. Based on the description, it is inferred that the permission checks are insufficient for controlling who can issue print jobs, making the module a target for privilege abuse.

Huawei HarmonyOS devices are affected because the vulnerability resides in the print module shipped with the operating system. No specific version numbers are disclosed, so any installation of Huawei:HarmonyOS that includes the print module is potentially vulnerable. Based on the description, it is inferred that the absence of version exclusions implies that all revisions with the affected component are at risk.

The CVSS score of 5.5 indicates moderate severity. The EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog, suggesting a lower current exploitation threat. However, the flaw involves permission checks, meaning exploitation likely requires local access or a privilege escalation that allows a user to invoke print functions bypassing security controls. Based on the description, it is inferred that an attacker would need to compromise the device or elevate privileges locally to successfully exploit the weakness.