Lucene search

HonorCVE-2023-51431

HistoryDec 29, 2023 - 4:15 a.m.

CVE-2023-51431

2023-12-2904:15:10

Honor

web.nvd.nist.gov

honor

products

incorrect privilege assignment

vulnerability

exploitation

device service exceptions

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

5.5

Confidence

High

EPSS

Percentile

9.0%

JSON

Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions.

Affected configurations

Nvd

Node

hihonorphoneserviceRange<11.0.0.243

VendorProductVersionCPE
hihonorphoneservice*cpe:2.3:o:hihonor:phoneservice:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
hihonor	phoneservice	*	cpe:2.3:o:hihonor:phoneservice::::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "com.hihonor.phoneservice\t",
    "vendor": "Honor",
    "versions": [
      {
        "lessThan": "11.0.0.243",
        "status": "affected",
        "version": "11.0.0.241",
        "versionType": "custom"
      }
    ]
  }
]

References

www.hihonor.com/global/security/cve-2023-51431/

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

5.5

Confidence

High

EPSS

Percentile

9.0%

JSON

Related for CVE-2023-51431