CVE-2025-53169 — Improper Authentication in Huawei Harmonyos

CWE-287 — Improper Authentication3 documents3 sources

Severity

7.6HIGHNVD

EPSS

0.0%

top 94.62%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Huawei Harmonyos

Timeline

PublishedJul 7

Description

Vulnerability of bypassing the process to start SA and use related functions on distributed cameras Impact: Successful exploitation of this vulnerability may allow the peer device to use the camera without user awareness.

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:LExploitability: 2.8 | Impact: 4.7

Affected Packages2 packages

▶CVEListV5huawei/harmonyos5.0.1, 5.1.0+1

▶NVDhuawei/harmonyos5.0.1, 5.1.0+1

🔴Vulnerability Details

GHSA

GHSA-9mhv-rjj8-qwm3: Vulnerability of bypassing the process to start SA and use related functions on distributed cameras Impact: Successful exploitation of this vulnerabil↗2025-07-07

▶

CVEList

CVE-2025-53169: Vulnerability of bypassing the process to start SA and use related functions on distributed cameras Impact: Successful exploitation of this vulnerabil↗2025-07-07

▶