CVE-2022-42463 — Softbus_server in communication subsystem has a authenication bypass vulnerability in a callback handler function. At…

CVE-2022-42463

Softbus_server in communication subsystem has a authenication bypass vulnerability in a callback handler function. Attackers can launch attacks on distributed networks by sending Bluetooth rfcomm packets to any remote device and executing arbitrary co ... PUBLISHED

Description (CNA)

OpenHarmony-v3.1.2 and prior versions have an authenication bypass vulnerability in a callback handler function of Softbus_server in communication subsystem. Attackers can launch attacks on distributed networks by sending Bluetooth rfcomm packets to any remote device and executing arbitrary commands.

Affected (CNA)

Vendor / product	Versions
OpenHarmony / OpenHarmony	affected OpenHarmony-v3.1.x-Release through 3.1.2

CWE

CWE-287

References

https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2022/2022-10.md

ADP enrichment

CVE

No English description supplied.

https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2022/2022-10.md

CISA-ADP

No English description supplied.

No references supplied.