Lucene search

3836d913-7555-4dd0-a509-f5667fdf5fe4NVD:CVE-2023-23436

HistoryDec 29, 2023 - 2:15 a.m.

CVE-2023-23436

2023-12-2902:15:44

CWE-347

3836d913-7555-4dd0-a509-f5667fdf5fe4

web.nvd.nist.gov

cve-2023-23436

exploitation

system file overwrite

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

EPSS

Percentile

9.0%

JSON

Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file

Affected configurations

Nvd

Node

hihonormagic_osRange<7.1.0.100

VendorProductVersionCPE
hihonormagic_os*cpe:2.3:o:hihonor:magic_os:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
hihonor	magic_os	*	cpe:2.3:o:hihonor:magic_os::::::::

References

www.hihonor.com/global/security/cve-2023-23436/

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

EPSS

Percentile

9.0%

JSON

Related for NVD:CVE-2023-23436