CVE-2022-38700: multimedia subsystem has a permission bypass vulnerability. LAN attackers can bypass permission control and get control of camera service.
OpenHarmony-v3.1.1 and prior versions have a permission bypass vulnerability. LAN attackers can bypass permission control and get control of camera service.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-38700?
CVE-2022-38700 is a permission bypass vulnerability in OpenHarmony-v3.1.1 and prior versions that allows LAN attackers to bypass permission control and gain control of the camera service.
How severe is CVE-2022-38700?
CVE-2022-38700 has a severity score of 8.8, which is classified as high.
Which software versions are affected by CVE-2022-38700?
OpenHarmony-v3.1.1 and prior versions are affected by CVE-2022-38700.
How can LAN attackers exploit CVE-2022-38700?
LAN attackers can exploit CVE-2022-38700 by bypassing permission control and gaining control of the camera service.
Are there any references to learn more about CVE-2022-38700?
Yes, you can refer to the following link for more information: [CVE-2022-38700](https://gitee.com/openharmony/security/blob/master/en/security-disclosure/2022/2022-09.md)