Paper/Archive/CVE-2023-44118

CVE-2023-44118

Huawei HarmonyOS — Vulnerability of undefined permissions in the MeeTime module.Successful exploitation of this vulnerability will affect availability and c…

EPSS 0.5%CVSS 9.1

critical.is priorityof 100

CVSS 9.1 (NVD)9.1 / 10 × 3027.3 Not in CISA KEV+300.0 EPSS percentile 40.7.407 × 208.1 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Vulnerability of undefined permissions in the MeeTime module.Successful exploitation of this vulnerability will affect availability and confidentiality.

Affected

ProductAffectedFixed inSource

HarmonyOS3.0.0–CNA

HarmonyOS2.0.0–CNA

EMUI13.0.0–CNA

EMUI12.0.0–CNA

EMUI11.0.1–CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refconsumer.huawei.com/en/support/bulletin/2023/10 refdevice.harmonyos.com/en/docs/security/update/security-bulletins-202310-0000001663676540