Vulnerabilidades en Honor

52 resultados
Análisis Vexday

Com 52 CVEs catalogadas e nenhuma confirmada em exploração ativa no catálogo KEV da CISA, o histórico de vulnerabilidades da Honor apresenta uma taxa de exploração abaixo da média geral do catálogo. O único CVE de severidade crítica registrado é o CVE-2023-23424, que também detém o maior escore EPSS observado no portfólio (0,0056), ainda assim um valor baixo em termos absolutos, sugerindo probabilidade reduzida de exploração em larga escala no curto prazo. A falha mais recorrente por tipo é CWE-203, relacionada a vazamento de informações por diferenças de comportamento observável, o que indica atenção necessária a controles de canal lateral e exposição indireta de dados. O surgimento de 3 novas CVEs nos últimos 90 dias e a ausência de PoCs públicas reforçam um perfil de risco moderado, mas que deve ser monitorado continuamente.

CVE-2024-8994MEDIUMSome Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.EPSS 0.2%CVE-2023-23439MEDIUM Some Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak. EPSS 0.2%CVE-2023-6939MEDIUM Some Honor products are affected by type confusion vulnerability, successful exploitation could cause denial of service.EPSS 0.2%CVE-2024-47153MEDIUMSome Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.EPSS 0.2%CVE-2024-8993MEDIUMSome Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.EPSS 0.2%CVE-2023-51427MEDIUM Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak. EPSS 0.2%CVE-2023-51428MEDIUM Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak. EPSS 0.2%CVE-2023-23442MEDIUM Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak. EPSS 0.2%CVE-2023-51426MEDIUM Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak. EPSS 0.2%CVE-2023-23443MEDIUM Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak. EPSS 0.2%CVE-2024-47155MEDIUMSome Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.EPSS 0.2%CVE-2024-47154MEDIUMSome Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.EPSS 0.2%CVE-2023-51435HIGH Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak. EPSS 0.2%CVE-2024-8992MEDIUMSome Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.EPSS 0.2%CVE-2023-51429MEDIUM Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak. EPSS 0.2%CVE-2023-51430MEDIUM Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak. EPSS 0.2%CVE-2024-47150LOWSome Honor products are affected by information leak vulnerability, successful exploitation could cause the information leak.EPSS 0.1%CVE-2024-47156LOWInformation Leak Vulnerability in Honor ProductEPSS 0.1%CVE-2024-47149LOWSome Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptiEPSS 0.1%CVE-2023-51431HIGH Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptEPSS 0.1%