CVE-2023-41304

EPSS 0.06%
Published 11.10.2023 12:15:10
Last modified 21.11.2024 08:21:01
Source psirt@huawei.com
Teams watchlist Login
Open Login

Parameter verification vulnerability in the window module.Successful exploitation of this vulnerability may cause the size of an app window to be adjusted to that of a floating window.

Affected products Warnungen 0 Metrics 2 CWE 1 References 5

Data is provided by the National Vulnerability Database (NVD)

Huawei ≫ Harmonyos Version3.0.0

Huawei ≫ Harmonyos Version3.1.0

Huawei ≫ Harmonyos Version4.0.0

Huawei ≫ Emui Version13.0.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.06%	0.178

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	5.3	3.9	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

CWE-754 Improper Check for Unusual or Exceptional Conditions

The product does not check or incorrectly checks for unusual or exceptional conditions that are not expected to occur frequently during day to day operation of the product.

https://consumer.huawei.com/en/support/bulletin/2023/10/

Vendor Advisory

https://device.harmonyos.com/en/docs/security/update/security-bulletins-202310-0000001663676540

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2023-41304

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-41304

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-41304

EUVD