CVE-2023-41304

Parameter verification vulnerability in the window module.Successful exploitation of this vulnerability may cause the size of an app window to be adjusted to that of a floating window.

CVSS v3 5.3 MEDIUM

5.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://consumer.huawei.com/en/support/bulletin/2023/10/	Vendor Advisory
https://device.harmonyos.com/en/docs/security/update/security-bulletins-202310-0000001663676540	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:huawei:harmonyos:3.0.0:::::::*
	cpe:2.3:o:huawei:harmonyos:3.1.0:::::::*
	cpe:2.3:o:huawei:harmonyos:4.0.0:::::::*

Configuration 2 (hide)

cpe:2.3:o:huawei:emui:13.0.0:*:*:*:*:*:*:*

History

No history.

Information

Published : 2023-10-11 12:15

Updated : 2023-10-16 16:40

NVD link : CVE-2023-41304

Mitre link : CVE-2023-41304

CVE.ORG link : CVE-2023-41304

JSON object : View

Products Affected

huawei

harmonyos
emui

CWE

CWE-754

Improper Check for Unusual or Exceptional Conditions

{"id": "CVE-2023-41304", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 3.9}]}, "published": "2023-10-11T12:15:10.993", "references": [{"url": "https://consumer.huawei.com/en/support/bulletin/2023/10/", "tags": ["Vendor Advisory"], "source": "psirt@huawei.com"}, {"url": "https://device.harmonyos.com/en/docs/security/update/security-bulletins-202310-0000001663676540", "tags": ["Vendor Advisory"], "source": "psirt@huawei.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-754"}]}, {"type": "Secondary", "source": "psirt@huawei.com", "description": [{"lang": "en", "value": "CWE-754"}]}], "descriptions": [{"lang": "en", "value": "Parameter verification vulnerability in the window module.Successful exploitation of this vulnerability may cause the size of an app window to be adjusted to that of a floating window."}, {"lang": "es", "value": "Vulnerabilidad de verificaci\u00f3n de par\u00e1metros en el m\u00f3dulo window. La explotaci\u00f3n exitosa de esta vulnerabilidad puede hacer que el tama\u00f1o de la ventana de una aplicaci\u00f3n se ajuste al de una ventana flotante."}], "lastModified": "2023-10-16T16:40:32.367", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:huawei:harmonyos:3.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CB3751C1-7729-41D3-AE50-80B5AF601135"}, {"criteria": "cpe:2.3:o:huawei:harmonyos:3.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4D81C4EF-7CAF-4E60-91A4-8CF7B95B2B54"}, {"criteria": "cpe:2.3:o:huawei:harmonyos:4.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8198CDB2-4BC5-411A-8736-615A531FC545"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:huawei:emui:13.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "353AEAF2-AF46-4835-93E1-4F942D5E2810"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@huawei.com"}