Lucene search
HistoryOct 11, 2023 - 1:15 p.m.
CVE-2023-44116
vulnerability
appwidget
access permissions
exploitation
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.3
Confidence
High
EPSS
0.001
Percentile
43.8%
Vulnerability of access permissions not being strictly verified in the APPWidget module.Successful exploitation of this vulnerability may cause some apps to run without being authorized.
Affected configurations
Node
huaweiharmonyosMatch2.0.0
ORhuaweiharmonyosMatch2.0.1
ORhuaweiharmonyosMatch2.1.0
ORhuaweiharmonyosMatch3.0.0
ORhuaweiharmonyosMatch3.1.0
ORhuaweiharmonyosMatch4.0.0
Node
huaweiemuiMatch11.0.1
ORhuaweiemuiMatch12.0.0
ORhuaweiemuiMatch12.0.1
ORhuaweiemuiMatch13.0.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| huawei | harmonyos | 2.0.0 | cpe:2.3:o:huawei:harmonyos:2.0.0:*:*:*:*:*:*:* |
| huawei | harmonyos | 2.0.1 | cpe:2.3:o:huawei:harmonyos:2.0.1:*:*:*:*:*:*:* |
| huawei | harmonyos | 2.1.0 | cpe:2.3:o:huawei:harmonyos:2.1.0:*:*:*:*:*:*:* |
| huawei | harmonyos | 3.0.0 | cpe:2.3:o:huawei:harmonyos:3.0.0:*:*:*:*:*:*:* |
| huawei | harmonyos | 3.1.0 | cpe:2.3:o:huawei:harmonyos:3.1.0:*:*:*:*:*:*:* |
| huawei | harmonyos | 4.0.0 | cpe:2.3:o:huawei:harmonyos:4.0.0:*:*:*:*:*:*:* |
| huawei | emui | 11.0.1 | cpe:2.3:o:huawei:emui:11.0.1:*:*:*:*:*:*:* |
| huawei | emui | 12.0.0 | cpe:2.3:o:huawei:emui:12.0.0:*:*:*:*:*:*:* |
| huawei | emui | 12.0.1 | cpe:2.3:o:huawei:emui:12.0.1:*:*:*:*:*:*:* |
| huawei | emui | 13.0.0 | cpe:2.3:o:huawei:emui:13.0.0:*:*:*:*:*:*:* |
Related
vulnrichment
vulnrichment
CVE-2023-44116
2023-10-11 12:01:44
prion
prion
Privilege escalation
2023-10-11 13:15:00
cnvd
cnvd
Huawei HarmonyOS and EMUI APPWidget Module Authorization Issue Vulnerability
2023-10-11 00:00:00
cvelist
cvelist
CVE-2023-44116
2023-10-11 12:01:44
cve
cve
CVE-2023-44116
2023-10-11 13:15:10
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.3
Confidence
High
EPSS
0.001
Percentile
43.8%
Related for NVD:CVE-2023-44116