PT-2023-5565 · Huawei · Harmonyos+1

Published 2023-09-12 · Updated 2024-09-25 · CVE-2023-41293

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions DDMP module (affected versions not specified)

Description The issue is related to a data security classification vulnerability in the DDMP module, which may affect confidentiality. Successful exploitation of this vulnerability could allow a remote attacker to disclose protected information. The vulnerability is associated with inadequate access control in the DDMP module of the EMUI shell of the HarmonyOS operating system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Access Control

Incorrect Privilege Assignment

Information Disclosure

Weakness Enumeration

CWE-284

CWE-266

CWE-200

CWE-227

Related Identifiers

BDU:2023-06216

CVE-2023-41293

Affected Products

Emui

Harmonyos

References · 10

• https://device.harmonyos.com/en/docs/security/update/security-bulletins-202309-0000001638925158 · Vendor Advisory
• https://consumer.huawei.com/en/support/bulletin/2023/9 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-41293 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-06216 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-41293 · Security Note
• https://vuldb.com/?id.240271 · Note
• https://t.me/cibsecurity/70985 · Telegram Post
• https://twitter.com/cracbot/status/1706549222466859062 · Twitter Post
• https://t.me/cvenotify/58567 · Telegram Post
• https://vulners.com/cve/CVE-2023-41293 · Note