Paper/Archive/CVE-2023-46773

CVE-2023-46773

Huawei HarmonyOS — Permission management vulnerability in the PMS module.

EPSS 0.5%CVSS 9.8

critical.is priorityof 100

38

CVSS 9.8 (NVD)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 44.1.441 × 208.8 No public exploit+100.0 SSVC exploitation: unknown+100.0

Description · from the CVE record

Permission management vulnerability in the PMS module. Successful exploitation of this vulnerability may cause privilege escalation.

Affected

ProductAffectedFixed inSource

HarmonyOS4.0.0–CNA

HarmonyOS3.1.0–CNA

HarmonyOS3.0.0–CNA

EMUI13.0.0–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refconsumer.huawei.com/en/support/bulletin/2023/12 refdevice.harmonyos.com/en/docs/security/update/security-bulletins-202312-0000001758430245