5.3

CVE-2023-4565

Broadcast permission control vulnerability in the framework module. Successful exploitation of this vulnerability may cause the hotspot feature to be unavailable.

Data is provided by the National Vulnerability Database (NVD)
HuaweiEmui Version11.0.1
HuaweiEmui Version12.0.0
HuaweiEmui Version12.0.1
HuaweiEmui Version13.0.0
HuaweiHarmonyos Version2.0.0
HuaweiHarmonyos Version2.0.1
HuaweiHarmonyos Version2.1.0
HuaweiHarmonyos Version3.0.0
HuaweiHarmonyos Version3.1.0
HuaweiHarmonyos Version4.0.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.07% 0.215
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
134c704f-9b21-4f2e-91b3-4a467353bcc0 5.3 3.9 1.4
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
CWE-732 Incorrect Permission Assignment for Critical Resource

The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.