CVE-2023-52541 - Vulnerability Details - OpenCVE

Authentication vulnerability in the API for app pre-loading. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable yes

Technical Impact partial

Vendors	Products
Huawei	Emui Harmonyos

No data.

No data.

References

Link	Providers
https://consumer.huawei.com/en/support/bulletin/2024/3/
https://device.harmonyos.com/en/docs/security/update/security-bulletins-202403-0000001667644725

History

Thu, 31 Oct 2024 15:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Huawei Huawei emui Huawei harmonyos
Weaknesses		CWE-862
CPEs		cpe:2.3:o:huawei:emui:12.0.0:::::::* cpe:2.3:o:huawei:emui:13.0.0:::::::* cpe:2.3:o:huawei:harmonyos:2.0.0:::::::* cpe:2.3:o:huawei:harmonyos:3.0.0:::::::* cpe:2.3:o:huawei:harmonyos:3.1.0:::::::* cpe:2.3:o:huawei:harmonyos:4.0.0:::::::*
Vendors & Products		Huawei Huawei emui Huawei harmonyos
Metrics		cvssV3_1 `{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}` ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: huawei

Published: 2024-04-08T08:47:29.919Z

Updated: 2024-10-31T15:05:06.846Z

Reserved: 2024-02-27T03:41:51.381Z

Link: CVE-2023-52541

Vulnrichment

Updated: 2024-08-02T23:03:20.825Z

NVD

Status : Awaiting Analysis

Published: 2024-04-08T09:15:08.600

Modified: 2024-11-21T08:40:00.333

Link: CVE-2023-52541

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-52541", "assignerOrgId": "25ac1063-e409-4190-8079-24548c77ea2e", "state": "PUBLISHED", "assignerShortName": "huawei", "dateReserved": "2024-02-27T03:41:51.381Z", "datePublished": "2024-04-08T08:47:29.919Z", "dateUpdated": "2024-10-31T15:05:06.846Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "HarmonyOS", "vendor": "Huawei", "versions": [{"status": "affected", "version": "4.0.0"}, {"status": "affected", "version": "3.1.0"}, {"status": "affected", "version": "3.0.0"}, {"status": "affected", "version": "2.1.0"}, {"status": "affected", "version": "2.0.0"}]}, {"defaultStatus": "unaffected", "product": "EMUI", "vendor": "Huawei", "versions": [{"status": "affected", "version": "13.0.0"}, {"status": "affected", "version": "12.0.0"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Authentication vulnerability in the API for app pre-loading.<br>Impact: Successful exploitation of this vulnerability may affect service confidentiality."}], "value": "Authentication vulnerability in the API for app pre-loading.\nImpact: Successful exploitation of this vulnerability may affect service confidentiality."}], "problemTypes": [{"descriptions": [{"description": "Permissions, Privileges, and Access Controls", "lang": "en"}]}], "providerMetadata": {"orgId": "25ac1063-e409-4190-8079-24548c77ea2e", "shortName": "huawei", "dateUpdated": "2024-04-08T08:47:29.919Z"}, "references": [{"url": "https://consumer.huawei.com/en/support/bulletin/2024/3/"}, {"url": "https://device.harmonyos.com/en/docs/security/update/security-bulletins-202403-0000001667644725"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-862", "lang": "en", "description": "CWE-862 Missing Authorization"}]}], "affected": [{"vendor": "huawei", "product": "harmonyos", "cpes": ["cpe:2.3:o:huawei:harmonyos:2.0.0:*:*:*:*:*:*:*", "cpe:2.3:o:huawei:harmonyos:3.0.0:*:*:*:*:*:*:*", "cpe:2.3:o:huawei:harmonyos:3.1.0:*:*:*:*:*:*:*", "cpe:2.3:o:huawei:harmonyos:4.0.0:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "2.0.0", "status": "affected"}, {"version": "3.0.0", "status": "affected"}, {"version": "3.1.0", "status": "affected"}, {"version": "4.0.0", "status": "affected"}]}, {"vendor": "huawei", "product": "emui", "cpes": ["cpe:2.3:o:huawei:emui:12.0.0:*:*:*:*:*:*:*", "cpe:2.3:o:huawei:emui:13.0.0:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "12.0.0", "status": "affected"}, {"version": "13.0.0", "status": "affected"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2024-10-31T15:03:18.996179Z", "id": "CVE-2023-52541", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-31T15:05:06.846Z"}}, {"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T23:03:20.825Z"}, "title": "CVE Program Container", "references": [{"url": "https://consumer.huawei.com/en/support/bulletin/2024/3/", "tags": ["x_transferred"]}, {"url": "https://device.harmonyos.com/en/docs/security/update/security-bulletins-202403-0000001667644725", "tags": ["x_transferred"]}]}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://consumer.huawei.com/en/support/bulletin/2024/3/", "tags": ["x_transferred"]}, {"url": "https://device.harmonyos.com/en/docs/security/update/security-bulletins-202403-0000001667644725", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T23:03:20.825Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2023-52541", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-10-31T15:03:18.996179Z"}}}], "affected": [{"cpes": ["cpe:2.3:o:huawei:harmonyos:2.0.0:*:*:*:*:*:*:*", "cpe:2.3:o:huawei:harmonyos:3.0.0:*:*:*:*:*:*:*", "cpe:2.3:o:huawei:harmonyos:3.1.0:*:*:*:*:*:*:*", "cpe:2.3:o:huawei:harmonyos:4.0.0:*:*:*:*:*:*:*"], "vendor": "huawei", "product": "harmonyos", "versions": [{"status": "affected", "version": "2.0.0"}, {"status": "affected", "version": "3.0.0"}, {"status": "affected", "version": "3.1.0"}, {"status": "affected", "version": "4.0.0"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:huawei:emui:12.0.0:*:*:*:*:*:*:*", "cpe:2.3:o:huawei:emui:13.0.0:*:*:*:*:*:*:*"], "vendor": "huawei", "product": "emui", "versions": [{"status": "affected", "version": "12.0.0"}, {"status": "affected", "version": "13.0.0"}], "defaultStatus": "unknown"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-862", "description": "CWE-862 Missing Authorization"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-05-23T19:01:22.438Z"}}], "cna": {"source": {"discovery": "UNKNOWN"}, "affected": [{"vendor": "Huawei", "product": "HarmonyOS", "versions": [{"status": "affected", "version": "4.0.0"}, {"status": "affected", "version": "3.1.0"}, {"status": "affected", "version": "3.0.0"}, {"status": "affected", "version": "2.1.0"}, {"status": "affected", "version": "2.0.0"}], "defaultStatus": "unaffected"}, {"vendor": "Huawei", "product": "EMUI", "versions": [{"status": "affected", "version": "13.0.0"}, {"status": "affected", "version": "12.0.0"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://consumer.huawei.com/en/support/bulletin/2024/3/"}, {"url": "https://device.harmonyos.com/en/docs/security/update/security-bulletins-202403-0000001667644725"}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "Authentication vulnerability in the API for app pre-loading.\nImpact: Successful exploitation of this vulnerability may affect service confidentiality.", "supportingMedia": [{"type": "text/html", "value": "Authentication vulnerability in the API for app pre-loading.<br>Impact: Successful exploitation of this vulnerability may affect service confidentiality.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "Permissions, Privileges, and Access Controls"}]}], "providerMetadata": {"orgId": "25ac1063-e409-4190-8079-24548c77ea2e", "shortName": "huawei", "dateUpdated": "2024-04-08T08:47:29.919Z"}}}, "cveMetadata": {"cveId": "CVE-2023-52541", "state": "PUBLISHED", "dateUpdated": "2024-10-31T15:05:06.846Z", "dateReserved": "2024-02-27T03:41:51.381Z", "assignerOrgId": "25ac1063-e409-4190-8079-24548c77ea2e", "datePublished": "2024-04-08T08:47:29.919Z", "assignerShortName": "huawei"}, "dataVersion": "5.1"}