by Kastro
Paper/Archive/CVE-2023-5801

CVE-2023-5801

Huawei HarmonyOS — Vulnerability of identity verification being bypassed in the face unlock module.

EPSS 0.4%CVSS 9.1
critical.is priorityof 100
35
CVSS 9.1 (NVD)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 36.6.366 × 207.3No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Vulnerability of identity verification being bypassed in the face unlock module. Successful exploitation of this vulnerability will affect integrity and confidentiality.

Affected

ProductAffectedFixed inSource
HarmonyOS4.0.0–CNA
HarmonyOS3.0.0–CNA
HarmonyOS2.0.0–CNA
EMUI13.0.0–CNA
EMUI12.0.0–CNA

Scores by source

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

refconsumer.huawei.com/en/support/bulletin/2023/11refdevice.harmonyos.com/en/docs/security/update/security-bulletins-202311-0000001729189597