CVE-2023-52109: Huawei HarmonyOS · Insufficient Verification of Data Authenticity
Affects Huawei HarmonyOSSource CVE Database V5
Not known to be exploited · CVSS 7.5 High.
Data as of 26 Oct 2026, 17:16 UTC
- EPSS
- 0.1% chance of exploitation in 30 days – higher than 6% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitation evidence
Disclosed: evidence found.
CVE published 16 Jan 2024
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 26 Oct 2026.
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| Huawei HarmonyOS | Affected
| Fixed in– |
AI-suggested
- Immediate mitigation should include network-level controls such as segmenting HarmonyOS devices from critical networks and limiting their communication to only trusted endpoints.
- Employ strict network monitoring and anomaly detection to identify unusual data flows or unauthorized access attempts involving HarmonyOS devices.
- Where possible, disable or restrict distributed service features that rely on trust relationships until patches are available.
- Engage with Huawei support channels to obtain official patches or security advisories and apply updates promptly once released.
- Implement additional encryption and authentication layers at the application level to compensate for the OS-level verification weakness.
- Conduct thorough security assessments and penetration testing focused on distributed communication channels within HarmonyOS environments.
- Educate IT and security teams about the vulnerability specifics to ensure rapid incident response if exploitation attempts are detected.
- For organizations deploying HarmonyOS devices, consider alternative solutions or vendors for critical systems until the vulnerability is fully remediated.
Description
Vulnerability of trust relationships being inaccurate in distributed scenarios. Successful exploitation of this vulnerability may affect service confidentiality.