Lucene search

HonorCVELIST:CVE-2023-23428

HistoryDec 29, 2023 - 3:02 a.m.

CVE-2023-23428

2023-12-2903:02:16

CWE-269

Honor

www.cve.org

honor products

privilege assignment

vulnerability

device service exceptions

exploitation

CVSS3

3.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

EPSS

0.001

Percentile

17.0%

JSON

Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Magic OS",
    "vendor": "Honor",
    "versions": [
      {
        "lessThan": "7.2.0.102",
        "status": "affected",
        "version": "7.0",
        "versionType": "custom"
      }
    ]
  }
]

References

www.hihonor.com/global/security/cve-2023-23428/

CVSS3

3.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

EPSS

0.001

Percentile

17.0%

JSON

Related for CVELIST:CVE-2023-23428