CVE-2022-43495: An abnormal packet recieved when distributedhardware_device_manager joining a network could cause a device reboot.
OpenHarmony-v3.1.2 and prior versions had a DOS vulnerability in distributedhardwaredevicemanager when joining a network. Network attakcers can send an abonormal packet when joining a network, cause a nullptr reference and device reboot.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2022-43495.
What is the description of the vulnerability?
OpenHarmony-v3.1.2 and prior versions had a DOS vulnerability in distributedhardware_device_manager when joining a network. Network attackers can send an abnormal packet when joining a network, causing a nullptr reference and device reboot.
Which software versions are affected by this vulnerability?
OpenHarmony-v3.1.2 and prior versions are affected by this vulnerability.
What is the severity of CVE-2022-43495?
The severity of CVE-2022-43495 is high with a CVSS score of 7.5.
How can an attacker exploit this vulnerability?
An attacker can exploit this vulnerability by sending an abnormal packet when joining a network, causing a nullptr reference and device reboot.