Incorrect Privilege Assignment in Honor Devices
CVE-2023-23438

4MEDIUM

Key Information:

Vendor

Honor

Status
LGE-AN00
Vendor
CVE Published:
29 December 2023

What is CVE-2023-23438?

A vulnerability affecting various Honor devices involves an incorrect privilege assignment that could potentially allow unauthorized actions, leading to service exceptions on the devices. This can compromise device functionality and user experience, making it essential for users to act promptly to mitigate risks associated with this security flaw.

Affected Version(s)

LGE-AN00 6.0 < 6.0.0.188

References

https://www.hihonor.com/global/security/cve-2023-23438/

CVSS V3.1

Score:
4
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.