CVE-2025-31174

CVSS 3.1 Score 6.8 of 10 (medium)

Details

Published Apr 7, 2025
CWE ID 200

Summary

CVE-2025-31174 is a newly disclosed path traversal vulnerability affecting the DFS (Distributed File System) module. An attacker could exploit this issue to navigate outside intended directories, potentially accessing sensitive files or data. The impact of successful exploitation includes a possible breach of service confidentiality. Users are advised to update their systems as soon as possible to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • HarmonyOS

Affected Vendors

  • Huawei Technologies