CVE-2023-23427mediumCWE-269

CVE-2023-23427: medium-severity vulnerability in Honor Magic OS

Published · Updated

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4epss 0.3%
In short

A flaw in Honor devices incorrectly assigns privileges to certain services, allowing an attacker with local access to disrupt device functionality. This can cause services to stop working properly.

Technical detail

Incorrect privilege assignment in Honor products allows an authenticated local attacker to escalate or misuse service permissions, resulting in denial of service or device instability. Exploitation requires local access to the affected device.

Summary generated and translated by AI from the official description.
Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions.
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Affected products
Honor · Magic OS