CVE-2025-58302

CVE-2025-58302

High ยท published November 28, 2025

CVSS v3.1
8.4
EPSS
0%
Percentile
0.7
In the wild
Unconfirmed
What it is

โšก A sneaky permissions hole in the Settings module could unlock sensitive data! This vulnerability reminds us that even the best-laid plans can have gaps. ๐Ÿ” Think of it like a restaurant where the manager accidentally leaves the door to the kitchen wide open. Anyone can waltz in and access confidential recipes, potentially ruining the business's reputation! If exploited, this vulnerability could allow unauthorized users to access sensitive information, compromising service confidentiality. Imagine the chaos if confidential details were leaked into the wrong hands โ€” trust shattered and reputations at stake!

Put simply

Think of it like a restaurant where the manager accidentally leaves the door to the kitchen wide open. Anyone can waltz in and access confidential recipes, potentially ruining the business's reputation! This vulnerability arises from inadequate permission controls in the Settings module, allowing unauthorized users to access restricted areas where sensitive information might reside.

What to do

If exploited, this vulnerability could allow unauthorized users to access sensitive information, compromising service confidentiality. Imagine the chaos if confidential details were leaked into the wrong hands โ€” trust shattered and reputations at stake! Update to the latest version that includes a fix for CVE-2025-58302 immediately. Review your permission settings to ensure they align with the principle of least privilege, locking down access appropriately. ๐Ÿ›ก๏ธ You've got this! Follow these steps, and you'll have your system locked down in no time! ๐Ÿš€

The record
Technical detail
CVSS v3.1
8.4 ยท HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00096 ยท 0.7th percentile
Published
2025-11-28T09:16Z
Affected products (12)
ProductVersionsFixed in
huawei/emuiall versionsโ€”
huawei/emuiall versionsโ€”
huawei/emuiall versionsโ€”
huawei/emuiall versionsโ€”
huawei/emuiall versionsโ€”
huawei/harmonyosall versionsโ€”
huawei/harmonyosall versionsโ€”
huawei/harmonyosall versionsโ€”
huawei/harmonyosall versionsโ€”
huawei/harmonyosall versionsโ€”
huawei/harmonyosall versionsโ€”
huawei/harmonyosall versionsโ€”
References (1)
EPSS history
Timeline
  • 28 NOV 02:56Z
    Permission control vulnerability in the Settings module
    cvelistv5