Path Traversal Vulnerability in Huawei Home Music System
CVE-2023-7300

8HIGH

Key Information:

Vendor
Huawei
Status
Harmonyos Ailife Solution 8.0
Vendor
CVE Published:
26 December 2024

Summary

The Huawei Home Music System is affected by a path traversal vulnerability that allows malicious actors to manipulate file paths. Exploiting this vulnerability can result in the deletion of critical music host files or changes to file permissions, compromising the integrity and functionality of the system. Users are encouraged to review the security advisory and implement necessary updates to mitigate potential risks.

Affected Version(s)

HarmonyOS AILife Solution 8.0 HarmonyOS AILife Audio Service 3.0.2.307

References

https://www.huawei.com/en/psirt/security-advisories/2024/...

CVSS V3.1

Score:
8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.