9.8

CVE-2023-44116

Vulnerability of access permissions not being strictly verified in the APPWidget module.Successful exploitation of this vulnerability may cause some apps to run without being authorized.

Data is provided by the National Vulnerability Database (NVD)
Huawei ≫ Harmonyos Version2.0.0
Huawei ≫ Harmonyos Version2.0.1
Huawei ≫ Harmonyos Version2.1.0
Huawei ≫ Harmonyos Version3.0.0
Huawei ≫ Harmonyos Version3.1.0
Huawei ≫ Harmonyos Version4.0.0
Huawei ≫ Emui Version11.0.1
Huawei ≫ Emui Version12.0.0
Huawei ≫ Emui Version12.0.1
Huawei ≫ Emui Version13.0.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.07% 0.231
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.8 3.9 5.9
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CWE-306 Missing Authentication for Critical Function

The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.