Vulnerability · Published Apr 2, 2024 · Assigned by OpenHarmony
CVE-2024-28226Fs has an improper input validation vulnerability
High 8.1
In plain English
A high-severity improper input validation in OpenHarmony from OpenHarmony. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 49% of all known vulnerabilities).
Severity (CVSS 3.1)8.1High
Exploit odds (30 days)0.6%top 50.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
in OpenHarmony v4.0.0 and prior versions allow a remote attacker cause DOS through improper input.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| OpenHarmony | OpenHarmony | v3.2.0 – through v4.0.0 |
Weakness: CWE-20 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H