CVE-2025-68963 — Weak Password Requirements in Huawei Emui

CWE-521 — Weak Password Requirements3 documents3 sources
Severity
5.3MEDIUMNVD
CNA5.7
EPSS
0.0%
top 99.88%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Huawei EmuiHuawei Harmonyos
Timeline
PublishedJan 14

Description

Man-in-the-middle attack vulnerability in the Clone module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CVSS vector

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 1.6 | Impact: 3.6

Affected Packages4 packages

▶CVEListV5huawei/emui15.0.0
▶NVDhuawei/emui15.0.0
▶CVEListV5huawei/harmonyos4.3.1
▶NVDhuawei/harmonyos4.3.1

🔴Vulnerability Details

2
GHSA
GHSA-ggqr-h248-r66h: Man-in-the-middle attack vulnerability in the Clone module↗2026-01-14
▶
CVEList
CVE-2025-68963: Man-in-the-middle attack vulnerability in the Clone module↗2026-01-14
▶
CVE-2025-68963 — Weak Password Requirements in Huawei | cvebase