CVE-2023-52368 - Vulnerability Details

Vendors	Products
Huawei	Emui Harmonyos

Link	Providers
https://consumer.huawei.com/en/support/bulletin/2024/2/
https://device.harmonyos.com/cn/docs/security/update/security-bulletins-202402-0000001834855405

Type	Values Removed	Values Added
First Time appeared		Huawei Huawei emui Huawei harmonyos
Weaknesses		NVD-CWE-noinfo
CPEs		cpe:2.3:o:huawei:emui:12.0.0:::::::* cpe:2.3:o:huawei:emui:13.0.0:::::::* cpe:2.3:o:huawei:harmonyos:2.0.0:::::::* cpe:2.3:o:huawei:harmonyos:2.1.0:::::::* cpe:2.3:o:huawei:harmonyos:3.0.0:::::::* cpe:2.3:o:huawei:harmonyos:3.1.0:::::::* cpe:2.3:o:huawei:harmonyos:4.0.0:::::::*
Vendors & Products		Huawei Huawei emui Huawei harmonyos

Type	Values Removed	Values Added
Metrics		cvssV3_1 `{'score': 5.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'}` ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-52368", "assignerOrgId": "25ac1063-e409-4190-8079-24548c77ea2e", "state": "PUBLISHED", "assignerShortName": "huawei", "dateReserved": "2024-01-26T06:51:31.235Z", "datePublished": "2024-02-18T03:38:36.700Z", "dateUpdated": "2024-11-22T19:05:02.749Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "HarmonyOS", "vendor": "Huawei", "versions": [{"status": "affected", "version": "4.0.0"}, {"status": "affected", "version": "3.1.0"}, {"status": "affected", "version": "3.0.0"}, {"status": "affected", "version": "2.1.0"}, {"status": "affected", "version": "2.0.0"}]}, {"defaultStatus": "unaffected", "product": "EMUI", "vendor": "Huawei", "versions": [{"status": "affected", "version": "13.0.0"}, {"status": "affected", "version": "12.0.0"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Input verification vulnerability in the account module.Successful exploitation of this vulnerability may cause features to perform abnormally."}], "value": "Input verification vulnerability in the account module.Successful exploitation of this vulnerability may cause features to perform abnormally."}], "problemTypes": [{"descriptions": [{"cweId": "CWE-20", "description": "CWE-20 Improper Input Validation", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "25ac1063-e409-4190-8079-24548c77ea2e", "shortName": "huawei", "dateUpdated": "2024-02-18T03:38:36.700Z"}, "references": [{"url": "https://consumer.huawei.com/en/support/bulletin/2024/2/"}, {"url": "https://device.harmonyos.com/cn/docs/security/update/security-bulletins-202402-0000001834855405"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2024-02-22T16:55:19.882384Z", "id": "CVE-2023-52368", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-11-22T19:05:02.749Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T22:55:41.621Z"}, "title": "CVE Program Container", "references": [{"url": "https://consumer.huawei.com/en/support/bulletin/2024/2/", "tags": ["x_transferred"]}, {"url": "https://device.harmonyos.com/cn/docs/security/update/security-bulletins-202402-0000001834855405", "tags": ["x_transferred"]}]}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2023-52368 (string)

assignerOrgId : 25ac1063-e409-4190-8079-24548c77ea2e (string)

state : PUBLISHED (string)

assignerShortName : huawei (string)

dateReserved : 2024-01-26T06:51:31.235Z (string)

datePublished : 2024-02-18T03:38:36.700Z (string)

dateUpdated : 2024-11-22T19:05:02.749Z (string)

}

containers : { »

cna : { »

affected : [ »

0 : { »

defaultStatus : unaffected (string)

product : HarmonyOS (string)

vendor : Huawei (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.0.0 (string)

}

1 : { »

status : affected (string)

version : 3.1.0 (string)

}

2 : { »

status : affected (string)

version : 3.0.0 (string)

}

3 : { »

status : affected (string)

version : 2.1.0 (string)

}

4 : { »

status : affected (string)

version : 2.0.0 (string)

}

]

}

1 : { »

defaultStatus : unaffected (string)

product : EMUI (string)

vendor : Huawei (string)

versions : [ »

0 : { »

status : affected (string)

version : 13.0.0 (string)

}

1 : { »

status : affected (string)

version : 12.0.0 (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

supportingMedia : [ »

0 : { »

base64 : false (boolean)

type : text/html (string)

value : Input verification vulnerability in the account module.Successful exploitation of this vulnerability may cause features to perform abnormally. (string)

}

]

value : Input verification vulnerability in the account module.Successful exploitation of this vulnerability may cause features to perform abnormally. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

cweId : CWE-20 (string)

description : CWE-20 Improper Input Validation (string)

lang : en (string)

type : CWE (string)

}

]

}

]

providerMetadata : { »

orgId : 25ac1063-e409-4190-8079-24548c77ea2e (string)

shortName : huawei (string)

dateUpdated : 2024-02-18T03:38:36.700Z (string)

}

references : [ »

0 : { »

url : https://consumer.huawei.com/en/support/bulletin/2024/2/ (string)

}

1 : { »

url : https://device.harmonyos.com/cn/docs/security/update/security-bulletins-202402-0000001834855405 (string)

}

]

source : { »

discovery : UNKNOWN (string)

}

x_generator : { »

engine : Vulnogram 0.1.0-dev (string)

}

adp : [ »

0 : { »

metrics : [ »

0 : { »

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 5.3 (number)

attackVector : NETWORK (string)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N (string)

integrityImpact : LOW (string)

userInteraction : NONE (string)

attackComplexity : LOW (string)

availabilityImpact : NONE (string)

privilegesRequired : NONE (string)

confidentialityImpact : NONE (string)

}

1 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2024-02-22T16:55:19.882384Z (string)

id : CVE-2023-52368 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-11-22T19:05:02.749Z (string)

}

1 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T22:55:41.621Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://consumer.huawei.com/en/support/bulletin/2024/2/ (string)

tags : [ »

0 : x_transferred (string)

]

}

1 : { »

url : https://device.harmonyos.com/cn/docs/security/update/security-bulletins-202402-0000001834855405 (string)

tags : [ »

0 : x_transferred (string)

]

}

]

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://consumer.huawei.com/en/support/bulletin/2024/2/", "tags": ["x_transferred"]}, {"url": "https://device.harmonyos.com/cn/docs/security/update/security-bulletins-202402-0000001834855405", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T22:55:41.621Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2023-52368", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-02-22T16:55:19.882384Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-05-23T19:01:12.963Z"}}], "cna": {"source": {"discovery": "UNKNOWN"}, "affected": [{"vendor": "Huawei", "product": "HarmonyOS", "versions": [{"status": "affected", "version": "4.0.0"}, {"status": "affected", "version": "3.1.0"}, {"status": "affected", "version": "3.0.0"}, {"status": "affected", "version": "2.1.0"}, {"status": "affected", "version": "2.0.0"}], "defaultStatus": "unaffected"}, {"vendor": "Huawei", "product": "EMUI", "versions": [{"status": "affected", "version": "13.0.0"}, {"status": "affected", "version": "12.0.0"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://consumer.huawei.com/en/support/bulletin/2024/2/"}, {"url": "https://device.harmonyos.com/cn/docs/security/update/security-bulletins-202402-0000001834855405"}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "Input verification vulnerability in the account module.Successful exploitation of this vulnerability may cause features to perform abnormally.", "supportingMedia": [{"type": "text/html", "value": "Input verification vulnerability in the account module.Successful exploitation of this vulnerability may cause features to perform abnormally.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-20", "description": "CWE-20 Improper Input Validation"}]}], "providerMetadata": {"orgId": "25ac1063-e409-4190-8079-24548c77ea2e", "shortName": "huawei", "dateUpdated": "2024-02-18T03:38:36.700Z"}}}, "cveMetadata": {"cveId": "CVE-2023-52368", "state": "PUBLISHED", "dateUpdated": "2024-11-22T19:05:02.749Z", "dateReserved": "2024-01-26T06:51:31.235Z", "assignerOrgId": "25ac1063-e409-4190-8079-24548c77ea2e", "datePublished": "2024-02-18T03:38:36.700Z", "assignerShortName": "huawei"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://consumer.huawei.com/en/support/bulletin/2024/2/ (string)

tags : [ »

0 : x_transferred (string)

]

}

1 : { »

url : https://device.harmonyos.com/cn/docs/security/update/security-bulletins-202402-0000001834855405 (string)

tags : [ »

0 : x_transferred (string)

]

}

]

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T22:55:41.621Z (string)

}

1 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 5.3 (number)

attackVector : NETWORK (string)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N (string)

integrityImpact : LOW (string)

userInteraction : NONE (string)

attackComplexity : LOW (string)

availabilityImpact : NONE (string)

privilegesRequired : NONE (string)

confidentialityImpact : NONE (string)

}

1 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2023-52368 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

version : 2.0.3 (string)

timestamp : 2024-02-22T16:55:19.882384Z (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-05-23T19:01:12.963Z (string)

}

]

cna : { »

source : { »

discovery : UNKNOWN (string)

}

affected : [ »

0 : { »

vendor : Huawei (string)

product : HarmonyOS (string)

versions : [ »

0 : { »

status : affected (string)

version : 4.0.0 (string)

}

1 : { »

status : affected (string)

version : 3.1.0 (string)

}

2 : { »

status : affected (string)

version : 3.0.0 (string)

}

3 : { »

status : affected (string)

version : 2.1.0 (string)

}

4 : { »

status : affected (string)

version : 2.0.0 (string)

}

]

defaultStatus : unaffected (string)

}

1 : { »

vendor : Huawei (string)

product : EMUI (string)

versions : [ »

0 : { »

status : affected (string)

version : 13.0.0 (string)

}

1 : { »

status : affected (string)

version : 12.0.0 (string)

}

]

defaultStatus : unaffected (string)

}

]

references : [ »

0 : { »

url : https://consumer.huawei.com/en/support/bulletin/2024/2/ (string)

}

1 : { »

url : https://device.harmonyos.com/cn/docs/security/update/security-bulletins-202402-0000001834855405 (string)

}

]

x_generator : { »

engine : Vulnogram 0.1.0-dev (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : Input verification vulnerability in the account module.Successful exploitation of this vulnerability may cause features to perform abnormally. (string)

supportingMedia : [ »

0 : { »

type : text/html (string)

value : Input verification vulnerability in the account module.Successful exploitation of this vulnerability may cause features to perform abnormally. (string)

base64 : false (boolean)

}

]

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-20 (string)

description : CWE-20 Improper Input Validation (string)

}

]

}

]

providerMetadata : { »

orgId : 25ac1063-e409-4190-8079-24548c77ea2e (string)

shortName : huawei (string)

dateUpdated : 2024-02-18T03:38:36.700Z (string)

}

cveMetadata : { »

cveId : CVE-2023-52368 (string)

state : PUBLISHED (string)

dateUpdated : 2024-11-22T19:05:02.749Z (string)

dateReserved : 2024-01-26T06:51:31.235Z (string)

assignerOrgId : 25ac1063-e409-4190-8079-24548c77ea2e (string)

datePublished : 2024-02-18T03:38:36.700Z (string)

assignerShortName : huawei (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:huawei:emui:12.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "A974CA73-84E8-480B-BB4C-4A81D0C985B2", "vulnerable": true}, {"criteria": "cpe:2.3:o:huawei:emui:13.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "353AEAF2-AF46-4835-93E1-4F942D5E2810", "vulnerable": true}, {"criteria": "cpe:2.3:o:huawei:harmonyos:2.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "20112231-B840-44D3-A061-B9B9F80EE378", "vulnerable": true}, {"criteria": "cpe:2.3:o:huawei:harmonyos:2.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "C01447F1-7F58-4AE3-B403-C01B2575D898", "vulnerable": true}, {"criteria": "cpe:2.3:o:huawei:harmonyos:3.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "CB3751C1-7729-41D3-AE50-80B5AF601135", "vulnerable": true}, {"criteria": "cpe:2.3:o:huawei:harmonyos:3.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "4D81C4EF-7CAF-4E60-91A4-8CF7B95B2B54", "vulnerable": true}, {"criteria": "cpe:2.3:o:huawei:harmonyos:4.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "8198CDB2-4BC5-411A-8736-615A531FC545", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Input verification vulnerability in the account module.Successful exploitation of this vulnerability may cause features to perform abnormally."}, {"lang": "es", "value": "Vulnerabilidad de verificaci\u00f3n de entrada en el m\u00f3dulo de cuenta. La explotaci\u00f3n exitosa de esta vulnerabilidad puede causar que las funciones funcionen de manera anormal."}], "id": "CVE-2023-52368", "lastModified": "2025-03-13T14:48:57.377", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2024-02-18T04:15:07.690", "references": [{"source": "psirt@huawei.com", "tags": ["Vendor Advisory"], "url": "https://consumer.huawei.com/en/support/bulletin/2024/2/"}, {"source": "psirt@huawei.com", "tags": ["Vendor Advisory"], "url": "https://device.harmonyos.com/cn/docs/security/update/security-bulletins-202402-0000001834855405"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://consumer.huawei.com/en/support/bulletin/2024/2/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://device.harmonyos.com/cn/docs/security/update/security-bulletins-202402-0000001834855405"}], "sourceIdentifier": "psirt@huawei.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-20"}], "source": "psirt@huawei.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:huawei:emui:12.0.0:*:*:*:*:*:*:* (string)

matchCriteriaId : A974CA73-84E8-480B-BB4C-4A81D0C985B2 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:o:huawei:emui:13.0.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 353AEAF2-AF46-4835-93E1-4F942D5E2810 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:o:huawei:harmonyos:2.0.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 20112231-B840-44D3-A061-B9B9F80EE378 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:o:huawei:harmonyos:2.1.0:*:*:*:*:*:*:* (string)

matchCriteriaId : C01447F1-7F58-4AE3-B403-C01B2575D898 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:o:huawei:harmonyos:3.0.0:*:*:*:*:*:*:* (string)

matchCriteriaId : CB3751C1-7729-41D3-AE50-80B5AF601135 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:o:huawei:harmonyos:3.1.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 4D81C4EF-7CAF-4E60-91A4-8CF7B95B2B54 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:o:huawei:harmonyos:4.0.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 8198CDB2-4BC5-411A-8736-615A531FC545 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : Input verification vulnerability in the account module.Successful exploitation of this vulnerability may cause features to perform abnormally. (string)

}

1 : { »

lang : es (string)

value : Vulnerabilidad de verificación de entrada en el módulo de cuenta. La explotación exitosa de esta vulnerabilidad puede causar que las funciones funcionen de manera anormal. (string)

}

]

id : CVE-2023-52368 (string)

lastModified : 2025-03-13T14:48:57.377 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : NETWORK (string)

availabilityImpact : NONE (string)

baseScore : 5.3 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : NONE (string)

integrityImpact : LOW (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 3.9 (number)

impactScore : 1.4 (number)

source : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

type : Secondary (string)

}

]

}

published : 2024-02-18T04:15:07.690 (string)

references : [ »

0 : { »

source : psirt@huawei.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://consumer.huawei.com/en/support/bulletin/2024/2/ (string)

}

1 : { »

source : psirt@huawei.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://device.harmonyos.com/cn/docs/security/update/security-bulletins-202402-0000001834855405 (string)

}

2 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://consumer.huawei.com/en/support/bulletin/2024/2/ (string)

}

3 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://device.harmonyos.com/cn/docs/security/update/security-bulletins-202402-0000001834855405 (string)

}

]

sourceIdentifier : psirt@huawei.com (string)

vulnStatus : Analyzed (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-20 (string)

}

]

source : psirt@huawei.com (string)

type : Secondary (string)

}

1 : { »

description : [ »

0 : { »

lang : en (string)

value : NVD-CWE-noinfo (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact Low

Availability Impact None

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Metrics

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact Low

Availability Impact None

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object