CVE-2023-52109 — Insufficient Verification of Data Authenticity in Huawei Emui

CWE-345 — Insufficient Verification of Data Authenticity3 documents3 sources

Severity

7.5HIGHNVD

EPSS

0.1%

top 77.94%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Huawei Emui Huawei Harmonyos

Timeline

PublishedJan 16

Description

Vulnerability of trust relationships being inaccurate in distributed scenarios. Successful exploitation of this vulnerability may affect service confidentiality.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages4 packages

▶CVEListV5huawei/emui13.0.0

▶NVDhuawei/emui13.0.0

▶CVEListV5huawei/harmonyos3.0.0, 3.1.0, 4.0.0+2

▶NVDhuawei/harmonyos3.0.0, 3.1.0, 4.0.0+2

🔴Vulnerability Details

CVEList

CVE-2023-52109: Vulnerability of trust relationships being inaccurate in distributed scenarios↗2024-01-16

▶

GHSA

GHSA-vrp7-hqrc-f29q: Vulnerability of trust relationships being inaccurate in distributed scenarios↗2024-01-16

▶