Lucene search

HonorCVELIST:CVE-2023-23430

HistoryDec 29, 2023 - 3:09 a.m.

CVE-2023-23430

2023-12-2903:09:10

CWE-269

Honor

www.cve.org

honor products

privilege vulnerability

cve-2023-23430

incorrect assignment

device service exceptions

CVSS3

3.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

EPSS

0.001

Percentile

17.0%

JSON

Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "com.hihonor.magichome\t",
    "vendor": "Honor",
    "versions": [
      {
        "lessThan": "7.60.10.303",
        "status": "affected",
        "version": "7.3.2.306",
        "versionType": "custom"
      }
    ]
  }
]

References

www.hihonor.com/global/security/cve-2023-23430/

CVSS3

3.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L

EPSS

0.001

Percentile

17.0%

JSON

Related for CVELIST:CVE-2023-23430