CVE-2023-52107

CVE-2023-52107 affects Huawei HarmonyOS (and EMUI) WMS module where permissions are not strictly verified, constituting a privilege-checking laxity vulnerability. Descriptions across sources indicate that exploitation could compromise service confidentiality. The CVSS metrics (AV:N/AC:L/PR:N/UI:N...

PT-2024-14401 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns a vulnerability where parameters are not verified in the WMS module. Successful exploitation of this vulnerability may affect service...

CVE-2022-48300

The WMS module lacks the authentication mechanism in some APIs. Successful exploitation of this vulnerability may affect data confidentiality...

CVE-2022-48300

The WMS module lacks the authentication mechanism in some APIs. Successful exploitation of this vulnerability may affect data confidentiality...

CVE-2022-48299

The WMS module lacks the authentication mechanism in some APIs. Successful exploitation of this vulnerability may affect data confidentiality...

Design/Logic Flaw

The WMS module lacks the authentication mechanism in some APIs. Successful exploitation of this vulnerability may affect data confidentiality...

Design/Logic Flaw

The WMS module lacks the authentication mechanism in some APIs. Successful exploitation of this vulnerability may affect data confidentiality...

CVE-2022-48299

The WMS module lacks the authentication mechanism in some APIs. Successful exploitation of this vulnerability may affect data confidentiality...

CVE-2022-48300

The WMS module lacks the authentication mechanism in some APIs. Successful exploitation of this vulnerability may affect data confidentiality...

CVE-2022-48300

The WMS module lacks the authentication mechanism in some APIs. Successful exploitation of this vulnerability may affect data confidentiality...

CVE-2022-48299

The WMS module lacks the authentication mechanism in some APIs. Successful exploitation of this vulnerability may affect data confidentiality...

CVE-2022-48299

CVE-2022-48299 affects Huawei HarmonyOS: the WMS module exposes APIs without proper authentication. Root cause: insufficient authentication in the WMS interface. Impact: potential data confidentiality loss via network access (CVSS 3.1 base score 7.5). Exploitation status is not detailed in the pr...

CVE-2022-48300

CVE-2022-48300 affects Huawei HarmonyOS WMS module where certain APIs lack authentication, enabling potential data confidentiality impact. The issue is documented with CVSS v3.1 base score 7.5 (Network vector, Low attack complexity, No privileges required, Confidentiality impact High). Connected ...