CVE-2023-41306

Vulnerability of mutex management in the bone voice ID trusted application (TA) module. Successful exploitation of this vulnerability may cause the bone voice ID feature to be unavailable.

CVSS v3 3.7 LOW

3.7^/10

CVSS v3 : LOW

Vector :

Exploitability : 2.2 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

References

Link	Resource
https://consumer.huawei.com/en/support/bulletin/2023/9/	Vendor Advisory
https://device.harmonyos.com/en/docs/security/update/security-bulletins-202309-0000001638925158	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:huawei:emui:12.0:::::::*
	cpe:2.3:o:huawei:emui:12.0.1:::::::*
	cpe:2.3:o:huawei:harmonyos:2.0.0:::::::*
	cpe:2.3:o:huawei:harmonyos:2.0.1:::::::*

History

No history.

Information

Published : 2023-09-27 15:19

Updated : 2023-09-28 17:10

NVD link : CVE-2023-41306

Mitre link : CVE-2023-41306

CVE.ORG link : CVE-2023-41306

JSON object : View

Products Affected

huawei

harmonyos
emui

CWE

CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

{"id": "CVE-2023-41306", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.7, "attackVector": "NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 2.2}]}, "published": "2023-09-27T15:19:28.560", "references": [{"url": "https://consumer.huawei.com/en/support/bulletin/2023/9/", "tags": ["Vendor Advisory"], "source": "psirt@huawei.com"}, {"url": "https://device.harmonyos.com/en/docs/security/update/security-bulletins-202309-0000001638925158", "tags": ["Vendor Advisory"], "source": "psirt@huawei.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-362"}]}, {"type": "Secondary", "source": "psirt@huawei.com", "description": [{"lang": "en", "value": "CWE-362"}]}], "descriptions": [{"lang": "en", "value": "Vulnerability of mutex management in the bone voice ID trusted application (TA) module. Successful exploitation of this vulnerability may cause the bone voice ID feature to be unavailable."}, {"lang": "es", "value": "Vulnerabilidad de la gesti\u00f3n de mutex en el m\u00f3dulo de aplicaci\u00f3n confiable (TA) de identificaci\u00f3n de voz bone. La explotaci\u00f3n exitosa de esta vulnerabilidad puede hacer que la funci\u00f3n de identificaci\u00f3n de voz bone no est\u00e9 disponible."}], "lastModified": "2023-09-28T17:10:39.950", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:huawei:emui:12.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "81995662-9C41-4E88-888D-C50703F858F8"}, {"criteria": "cpe:2.3:o:huawei:emui:12.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2DF07E7F-3A18-4B74-B73D-DF3647C2A48F"}, {"criteria": "cpe:2.3:o:huawei:harmonyos:2.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "20112231-B840-44D3-A061-B9B9F80EE378"}, {"criteria": "cpe:2.3:o:huawei:harmonyos:2.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "64118936-E2A5-4935-8594-29DF29B5475A"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@huawei.com"}