CVE-2023-23428
8Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 3.3epss 0.3%
exploitation probability
0.3%top 77% of all CVEs
observed exploitation
nono source reports it
In short
Some Honor devices have a flaw where certain user permissions are incorrectly set, allowing unintended access to sensitive functions. This can cause the device to malfunction or stop working properly.
Technical detail
An incorrect privilege assignment vulnerability (CWE-269) in Honor products allows users or processes to gain elevated permissions beyond their intended scope. Exploitation could lead to unauthorized access to device services and cause denial of service conditions.
Summary generated and translated by AI from the official description.
Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions.
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L
Affected products
Honor · Magic OS