by Kastro
Paper/Archive/CVE-2023-52381

CVE-2023-52381

Huawei HarmonyOS — Script injection vulnerability in the email module.Successful exploitation of this vulnerability may affect service confidentiality, inte…

EPSS 0.4%CVSS 9.8
critical.is priorityof 100
37
CVSS 9.8 (ADP)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 38.8.388 × 207.8No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Script injection vulnerability in the email module.Successful exploitation of this vulnerability may affect service confidentiality, integrity, and availability.

Affected

ProductAffectedFixed inSource
HarmonyOS4.0.0–CNA
HarmonyOS3.1.0–CNA
HarmonyOS3.0.0–CNA
HarmonyOS2.1.0–CNA
HarmonyOS2.0.0–CNA
EMUI13.0.0–CNA
EMUI12.0.0–CNA
harmonyos4.0.0–CISA-ADP
harmonyos3.1.0–CISA-ADP
harmonyos3.0.0–CISA-ADP
harmonyos2.1.0–CISA-ADP
harmonyos2.0.0–CISA-ADP

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refconsumer.huawei.com/en/support/bulletin/2024/2refdevice.harmonyos.com/cn/docs/security/update/security-bulletins-202402-0000001834855405