Description
Permission control vulnerability in the Wi-Fi enhancement module. Impact: Successful exploitation of this vulnerability may affect availability.
Published: 2026-08-17
Score: 6.2 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The flaw is a permission control weakness in the Wi‑Fi enhancement module, allowing an attacker to alter module behavior or disable it. The vulnerability is classified as CWE‑755 and would compromise system availability, potentially disconnecting devices from the network or preventing them from functioning normally. No additional impact such as confidentiality or integrity was documented.

Affected Systems

Products affected are Huawei EMUI and Huawei HarmonyOS. Specific versions were not disclosed in the information provided.

Risk and Exploitability

The CVSS score of 6.2 indicates a medium severity impact. The EPSS score is not available, so the exploitation probability cannot be quantified. The vulnerability is not listed in CISA's KEV catalog, suggesting no publicly documented active exploitation. Based on the description, the likely attack vector involves manipulating privileged services tied to Wi‑Fi functionality, possibly via local privilege escalation or remote exploitation through vulnerable firmware. No official solution or workaround is listed, so the risk remains until a patch or mitigation is applied.

Generated by OpenCVE AI on August 17, 2026 at 11:07 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Consult Huawei's support bulletin and apply any available firmware patch that addresses the Wi‑Fi module permission flaw.
  • If no patch exists, disable the Wi‑Fi enhancement module or restrict its access permissions to prevent unauthorized control.
  • Continuously monitor network stability and access logs for anomalous behavior that may indicate exploitation attempts.

Generated by OpenCVE AI on August 17, 2026 at 11:07 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Mon, 17 Aug 2026 11:30:00 +0000

Type Values Removed Values Added
Title Permission Control Failed for Wi‑Fi Enhancement Module Leading to Availability Degradation
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Mon, 17 Aug 2026 09:45:00 +0000

Type Values Removed Values Added
First Time appeared Huawei
Huawei emui
Huawei harmonyos
Vendors & Products Huawei
Huawei emui
Huawei harmonyos

Mon, 17 Aug 2026 08:45:00 +0000

Type Values Removed Values Added
Description Permission control vulnerability in the Wi-Fi enhancement module. Impact: Successful exploitation of this vulnerability may affect availability.
Weaknesses CWE-755
References
Metrics cvssV3_1

{'score': 6.2, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}


cve-icon MITRE

Status: PUBLISHED

Assigner: huawei

Published:

Updated: 2026-08-17T10:50:33.203Z

Reserved: 2026-05-29T03:16:14.062Z

Link: CVE-2026-49305

cve-icon Vulnrichment

Updated: 2026-08-17T10:50:29.990Z

cve-icon NVD

Status : Deferred

Published: 2026-08-17T09:17:30.580

Modified: 2026-08-26T16:33:17.117

Link: CVE-2026-49305

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-17T11:15:04Z

Weaknesses
  • CWE-755

    Improper Handling of Exceptional Conditions