← back
CVE-2023-23427mediumCWE-269

CVE-2023-23427

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4epss 0.3%
exploitation probability
0.3%top 72% of all CVEs
observed exploitation
nono source reports it
In short

A flaw in Honor devices incorrectly assigns privileges to certain services, allowing an attacker with local access to disrupt device functionality. This can cause services to stop working properly.

Technical detail

Incorrect privilege assignment in Honor products allows an authenticated local attacker to escalate or misuse service permissions, resulting in denial of service or device instability. Exploitation requires local access to the affected device.

Summary generated and translated by AI from the official description.
Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions.
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected products
Honor · Magic OS