What is the CVSS score of CVE-2025-58308?

CVE-2025-58308 has a CVSS 3.1 base score of 7.3 (High). CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H. EPSS exploitation probability: 0.0%.

Which versions of Harmonyos are affected by CVE-2025-58308?

CVE-2025-58308 presents moderate security risk rated CVSS 7.3. Exploitation could compromise the security of affected deployments.

How to fix or mitigate CVE-2025-58308?

Within 7 days: Identify all affected systems and apply vendor patches promptly. Monitor vendor channels for patch availability.

Harmonyos CVE-2025-58308

HIGH

Improperly Implemented Security Check for Standard (CWE-358)

2025-11-28 psirt@huawei.com

Information Disclosure Harmonyos

7.3

CVSS 3.1

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 28, 2026 - 19:24 vuln.today

CVE Published

Nov 28, 2025 - 04:16 nvd

HIGH 7.3

DescriptionNVD

Vulnerability of improper criterion security check in the call module. Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.

AnalysisAI

Vulnerability of improper criterion security check in the call module. Rated high severity (CVSS 7.3), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-358. Vulnerability of improper criterion security check in the call module. Impact: Successful exploitation of this vulnerability may cause features to perform abnormally. Affected products include: Huawei Harmonyos.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

CVE-2025-58308 vulnerability details – vuln.today

Back