CVE-2023-34159 — Improper Privilege Management in Huawei Emui

3 documents3 sources
Severity
9.8CRITICALNVD
EPSS
0.2%
top 62.21%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Huawei EmuiHuawei Harmonyos
Timeline
PublishedJun 19

Description

Improper permission control vulnerability in the Notepad app.Successful exploitation of the vulnerability may lead to privilege escalation, which affects availability and confidentiality.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages3 packages

▶CVEListV5huawei/emuiunspecified
▶NVDhuawei/emui13.0.0
▶CVEListV5huawei/harmonyos3.1.0, unspecified+1

🔴Vulnerability Details

2
GHSA
GHSA-6vf9-6gcr-cg7q: Improper permission control vulnerability in the Notepad app↗2023-06-19
▶
CVEList
CVE-2023-34159: Improper permission control vulnerability in the Notepad app↗2023-06-19
▶
CVE-2023-34159 — Improper Privilege Management | cvebase