Incorrect Privilege Assignment in Honor Products
CVE-2023-23429

4MEDIUM

Key Information:

Vendor

Honor

Status
Magic OS
Vendor
CVE Published:
29 December 2023

What is CVE-2023-23429?

Certain Honor products experience an incorrect privilege assignment vulnerability. Exploitation of this vulnerability may lead to service exceptions on affected devices, potentially compromising device functionality and security. Regularly updating your device and monitoring security advisories can help protect against exploitation.

Affected Version(s)

Magic OS 7.0 < 7.0.0.193

References

https://www.hihonor.com/global/security/cve-2023-23429/

CVSS V3.1

Score:
4
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.