Confidentiality loss via unrestricted authentication attempts

Improper authentication in listed Huawei HarmonyOS and EMUI releases allows remote attackers to expose confidential service data via brute force. The device authentication module insufficiently restricts repeated authentication attempts, but Huawei has not disclosed the affected interface or credential flow. Exploitation requires network access to a reachable device authentication interface; the published impact is limited to confidentiality, with no reported data modification or service interruption.