CVE-2023-46757

Опубликовано: 08 нояб. 2023

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

The remote PIN module has a vulnerability that causes incorrect information storage locations.Successful exploitation of this vulnerability may affect confidentiality.

Ссылки

https://consumer.huawei.com/en/support/bulletin/2023/11/
Not Applicable
Vendor Advisory
https://device.harmonyos.com/en/docs/security/update/security-bulletins-202311-0000001729189597
Vendor Advisory
https://consumer.huawei.com/en/support/bulletin/2023/11/
Not Applicable
Vendor Advisory
https://device.harmonyos.com/en/docs/security/update/security-bulletins-202311-0000001729189597
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:huawei:harmonyos:4.0.0:*:*:*:*:*:*:*

EPSS

Процентиль: 36%

0.0015

Низкий

7.5 High

CVSS3

Дефекты

CWE-200

NVD-CWE-noinfo

CWE-200

Связанные уязвимости

GHSA-gvr7-26fw-gx28

CVSS3: 7.5

github

около 2 лет назад

Keep-alive vulnerability in the sticky broadcast mechanism. Successful exploitation of this vulnerability may cause malicious apps to run continuously in the background.

EPSS

Процентиль: 36%

0.0015

Низкий

7.5 High

CVSS3

Дефекты

CWE-200

NVD-CWE-noinfo

CWE-200