Lucene search

HonorCVELIST:CVE-2023-51431

HistoryDec 29, 2023 - 3:43 a.m.

CVE-2023-51431

2023-12-2903:43:09

Honor

www.cve.org

honor products

privilege assignment vulnerability

device service exceptions

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.1

Confidence

High

EPSS

Percentile

9.0%

JSON

Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "com.hihonor.phoneservice\t",
    "vendor": "Honor",
    "versions": [
      {
        "lessThan": "11.0.0.243",
        "status": "affected",
        "version": "11.0.0.241",
        "versionType": "custom"
      }
    ]
  }
]

References

www.hihonor.com/global/security/cve-2023-51431/

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

7.1

Confidence

High

EPSS

Percentile

9.0%

JSON

Related for CVELIST:CVE-2023-51431