CVE-2026-49304
Received Received - Intake

Permission Control Flaw in Device Key Management

Publication date: 2026-08-17

Last updated on: 2026-08-17

Assigner: Huawei Technologies

Description
Permission control vulnerability in the device key management module. Impact: Successful exploitation of this vulnerability may affect availability.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-17
Last Modified
2026-08-17
Generated
2026-08-17
AI Q&A
2026-08-17
EPSS Evaluated
N/A
NVD
CVE-2026-49304
EUVD
EUVD-2026-60071

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
huawei harmonyos 6.1.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-264 Permissions, Privileges, and Access Controls

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This is a permission control vulnerability in the device key management module. It may allow unauthorized access or manipulation of device keys, potentially affecting system availability.

Impact Analysis

Successful exploitation could lead to reduced system availability, causing disruptions in device operations or services that rely on key management.

Compliance Impact

The provided CVE data does not specify direct impacts on compliance with GDPR, HIPAA, or other standards. The vulnerability affects availability through permission control issues in the device key management module, but no explicit compliance implications are mentioned.

Mitigation Strategies

Apply vendor patches or updates for the device key management module. Restrict access to the affected module to authorized personnel only. Monitor system logs for unusual activity related to key management.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-49304. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart