by Kastro
Paper/Archive/CVE-2023-41297

CVE-2023-41297

Huawei HarmonyOS — Vulnerability of defects introduced in the design process in the HiviewTunner module.

EPSS 0.5%CVSS 9.8
critical.is priorityof 100
38
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 42.4.424 × 208.5No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Vulnerability of defects introduced in the design process in the HiviewTunner module. Successful exploitation of this vulnerability may cause service hijacking.

Affected

ProductAffectedFixed inSource
HarmonyOS2.0.0–CNA
EMUI12.0.0–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refconsumer.huawei.com/en/support/bulletin/2023/9refdevice.harmonyos.com/en/docs/security/update/security-bulletins-202309-0000001638925158