CVE-2024-27897

2024-04-0809:25:40

CWE-200

huawei

github.com

input verification

call module

service confidentiality

vulnerability

AI Score

6.9

Confidence

Low

SSVC

Exploitation

none

Automatable

yes

Technical Impact

partial

JSON

Input verification vulnerability in the call module.
Impact: Successful exploitation of this vulnerability may affect service confidentiality.

CNA Affected

[
  {
    "vendor": "Huawei",
    "product": "HarmonyOS",
    "versions": [
      {
        "status": "affected",
        "version": "4.0.0"
      },
      {
        "status": "affected",
        "version": "3.1.0"
      },
      {
        "status": "affected",
        "version": "3.0.0"
      },
      {
        "status": "affected",
        "version": "2.0.0"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Huawei",
    "product": "EMUI",
    "versions": [
      {
        "status": "affected",
        "version": "13.0.0"
      },
      {
        "status": "affected",
        "version": "12.0.0"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:o:huawei:harmonyos:2.0.0:*:*:*:*:*:*:*",
      "cpe:2.3:o:huawei:harmonyos:3.0.0:*:*:*:*:*:*:*",
      "cpe:2.3:o:huawei:harmonyos:3.1.0:*:*:*:*:*:*:*",
      "cpe:2.3:o:huawei:harmonyos:4.0.0:*:*:*:*:*:*:*"
    ],
    "vendor": "huawei",
    "product": "harmonyos",
    "versions": [
      {
        "status": "affected",
        "version": "2.0.0"
      },
      {
        "status": "affected",
        "version": "3.0.0"
      },
      {
        "status": "affected",
        "version": "3.1.0"
      },
      {
        "status": "affected",
        "version": "4.0.0"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:o:huawei:emui:12.0.0:*:*:*:*:*:*:*",
      "cpe:2.3:o:huawei:emui:13.0.0:*:*:*:*:*:*:*"
    ],
    "vendor": "huawei",
    "product": "emui",
    "versions": [
      {
        "status": "affected",
        "version": "12.0.0"
      },
      {
        "status": "affected",
        "version": "13.0.0"
      }
    ],
    "defaultStatus": "unknown"
  }
]