Lucene search

K
nvd3836d913-7555-4dd0-a509-f5667fdf5fe4NVD:CVE-2023-23433
HistoryDec 29, 2023 - 2:15 a.m.

CVE-2023-23433

2023-12-2902:15:44
CWE-347
3836d913-7555-4dd0-a509-f5667fdf5fe4
web.nvd.nist.gov
2
honor products
signature management
vulnerability
system file overwrite
exploitation

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

EPSS

0

Percentile

9.0%

Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file.

Affected configurations

Nvd
Node
hihonornth-an00_firmwareRange<7.0.0.157
AND
hihonornth-an00Match-
VendorProductVersionCPE
hihonornth-an00_firmware*cpe:2.3:o:hihonor:nth-an00_firmware:*:*:*:*:*:*:*:*
hihonornth-an00-cpe:2.3:h:hihonor:nth-an00:-:*:*:*:*:*:*:*

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

EPSS

0

Percentile

9.0%

Related for NVD:CVE-2023-23433