PT-2025-24023 · Huawei · Harmonyos

Published 2025-06-06 · Updated 2025-06-06 · CVE-2025-48904

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions The product name cannot be determined.

Description The issue allows cards to call unauthorized APIs in the FRS process. Successful exploitation may affect availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Authentication Bypass Using an Alternate Path or Channel

Weakness Enumeration

CWE-288

Related Identifiers

CVE-2025-48904

Affected Products

Harmonyos

References · 4

• https://osv.dev/vulnerability/CVE-2025-48904 · Vendor Advisory
• https://consumer.huawei.com/en/support/bulletin/2025/6 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-48904 · Security Note
• https://twitter.com/CVEnew/status/1930880595112120622 · Twitter Post