Skip to content
OpenAdvisories
High · 8.3 CVE-2022-42463 EUVD-2022-45536GHSA-j43q-9x66-wv6c

Softbus_server in communication subsystem has a authenication bypass vulnerability in a callback handler function. Attackers can launch attacks on distributed networks by sending Bluetooth rfcomm packets to any remote device and executing arbitrary co ...

Published Oct 14, 2022 · Updated May 14, 2025 · Assigned by OpenHarmony

Vendor: OpenHarmony Product: OpenHarmony

Description

OpenHarmony-v3.1.2 and prior versions have an authenication bypass vulnerability in a callback handler function of Softbus_server in communication subsystem. Attackers can launch attacks on distributed networks by sending Bluetooth rfcomm packets to any remote device and executing arbitrary commands.

Affected products

VendorProductAffectedFixed
OpenHarmony OpenHarmony OpenHarmony-v3.1.x-Release – ≤ 3.1.2 —

References