by Kastro
Paper/Archive/CVE-2023-34159

CVE-2023-34159

Huawei HarmonyOS — Improper permission control vulnerability in the Notepad app.Successful exploitation of the vulnerability may lead to privilege escalatio…

EPSS 0.5%CVSS 9.8
critical.is priorityof 100
38
CVSS 9.8 (ADP, NVD agree)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 40.9.409 × 208.2No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Improper permission control vulnerability in the Notepad app.Successful exploitation of the vulnerability may lead to privilege escalation, which affects availability and confidentiality.

Affected

ProductAffectedFixed inSource
HarmonyOS3.1.0–CNA
HarmonyOSunspecified–CNA
EMUIunspecified–CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refconsumer.huawei.com/en/support/bulletin/2023/6