CVE-2023-0117 — Improper Authentication in Huawei Emui

CWE-287 — Improper Authentication3 documents3 sources
Severity
5.3MEDIUMNVD
EPSS
0.1%
top 84.18%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Huawei EmuiHuawei Harmonyos
Timeline
PublishedMay 26

Description

The online authentication provided by the hwKitAssistant lacks strict identity verification of applications. Successful exploitation of this vulnerability may affect availability of features,such as MeeTime.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:LExploitability: 3.9 | Impact: 1.4

Affected Packages3 packages

▶CVEListV5huawei/emui13.0.0
▶NVDhuawei/emui13.0.0
▶CVEListV5huawei/harmonyos3.0.0, 3.1.0+1

🔴Vulnerability Details

2
GHSA
GHSA-c74m-6p5x-cfmf: The online authentication provided by the hwKitAssistant lacks strict identity verification of applications↗2023-05-26
▶
CVEList
CVE-2023-0117: The online authentication provided by the hwKitAssistant lacks strict identity verification of applications↗2023-05-26
▶
CVE-2023-0117 — Improper Authentication in Huawei Emui | cvebase