PT-2023-5721 · Unknown · Hiviewtunner

Published 2023-09-12 · Updated 2023-09-25 · CVE-2023-41297

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HiviewTunner module (affected versions not specified)

Description The issue is related to defects introduced in the design process of the HiviewTunner module, which can be exploited to cause service hijacking. This may allow a remote attacker to intercept service traffic. The estimated number of potentially affected devices and details about real-world incidents are not provided.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2023-06391

CVE-2023-41297

Affected Products

Hiviewtunner

References · 11

• https://device.harmonyos.com/en/docs/security/update/security-bulletins-202309-0000001638925158 · Vendor Advisory
• https://consumer.huawei.com/en/support/bulletin/2023/9 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-06391 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-41297 · Security Note
• https://osv.dev/vulnerability/CVE-2023-41297 · Vendor Advisory
• https://twitter.com/CVEnew/status/1706276247037526352 · Twitter Post
• https://t.me/cvenotify/58540 · Telegram Post
• https://vulners.com/cve/CVE-2023-41297 · Note
• https://twitter.com/cracbot/status/1706549216129294380 · Twitter Post
• https://vuldb.com/?id.240267 · Note
• https://t.me/cibsecurity/70988 · Telegram Post