Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-34134 State: PUBLISHED Published: 2023-07-13T02:35:41.109Z Last Updated: 2024-10-30T18:52:38.438Z Vendors: SonicWall Products: GMS, Analytics Problem Types: CWE-200 Description: Exposure of sensitive information to an unauthorized actor vulnerability in SonicWall GMS and Analytics allows authenticated attacker to read administrator password hash via a web service call. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010 - https://www.sonicwall.com/support/notices/2307101502180
ttps://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010 - https://www.sonicwall.com/support/notices/230710150218060
CVE ID: CVE-2023-34135 State: PUBLISHED Published: 2023-07-13T02:37:59.279Z Last Updated: 2024-10-30T18:52:08.987Z Vendors: SonicWall Products: GMS, Analytics Problem Types: CWE-36 Description: Path Traversal vulnerability in SonicWall GMS and Analytics allows a remote authenticated attacker to read arbitrary files from the underlying file system via web service. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010 - https://www.sonicwall.com/support/notices/230710150218060
CVE ID: CVE-2023-34136 State: PUBLISHED Published: 2023-07-13T02:40:20.667Z Last Updated: 2024-10-30T18:50:27.471Z Vendors: SonicWall Products: GMS, Analytics Problem Types: CWE-434 Description: Vulnerability in SonicWall GMS and Analytics allows unauthenticated attacker to upload files to a restricted location not controlled by the attacker. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010 - https://www.sonicwall.com/support/notices/230710150218060
CVE ID: CVE-2023-34137 State: PUBLISHED Published: 2023-07-13T02:43:08.405Z Last Updated: 2024-10-30T18:49:22.304Z Vendors: SonicWall Products: GMS, Analytics Problem Types: CWE-305 Description: SonicWall GMS and Analytics CAS Web Services application use static values for authentication without proper checks leading to authentication bypass vulnerability. This issue affects GMS: 9.3.2-SP1 and earlier versions; Analytics: 2.5.0.4-R7 and earlier versions. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2023-0010 - https://www.sonicwall.com/support/notices/230710150218060
CVE ID: CVE-2023-34138 State: PUBLISHED Published: 2023-07-17T17:31:40.719Z Last Updated: 2024-10-30T18:02:28.372Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Zyxel Products: ATP series firmware, USG FLEX series firmware, USG FLEX 50(W) series firmware, USG20(W)-VPN series firmware, VPN series firmware Problem Types: CWE-78 Description: A command injection vulnerability in the hotspot management feature of the Zyxel ATP series firmware versions 4.60 through 5.36 Patch 2, USG FLEX series firmware versions 4.60 through 5.36 Patch 2, USG FLEX 50(W) series firmware versions 4.60 through 5.36 Patch 2, USG20(W)-VPN series firmware versions 4.60 through 5.36 Patch
50(W) series firmware versions 4.60 through 5.36 Patch 2, USG20(W)-VPN series firmware versions 4.60 through 5.36 Patch 2, and VPN series firmware versions 4.60 through 5.36 Patch 2, could allow an unauthenticated, LAN-based attacker to execute some OS commands on an affected device if the attacker could trick an authorized administrator to add their IP address to the list of trusted RADIUS clients in advance. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-firewalls-and-wlan-controllers
CVE ID: CVE-2023-34139 State: PUBLISHED Published: 2023-07-17T17:36:32.909Z Last Updated: 2024-10-29T16:19:03.216Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Zyxel Products: USG FLEX series firmware, VPN series firmware Problem Types: CWE-78 Description: A command injection vulnerability in the Free Time WiFi hotspot feature of the Zyxel USG FLEX series firmware versions 4.50 through 5.36 Patch 2 and VPN series firmware versions 4.20 through 5.36 Patch 2, could allow an unauthenticated, LAN-based attacker to execute some OS commands on an affected device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www
n affected device. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-firewalls-and-wlan-controllers
CVE ID: CVE-2023-34140 State: PUBLISHED Published: 2023-07-17T17:49:38.175Z Last Updated: 2024-10-21T19:42:15.688Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) Vendors: Zyxel Products: ATP series firmware, USG FLEX series firmware, USG FLEX 50(W) series firmware, USG20(W)-VPN series firmware, VPN series firmware, NXC2500 firmware, NXC5500 firmware Problem Types: CWE-120 Description: A buffer overflow vulnerability in the Zyxel ATP series firmware versions 4.32 through 5.36 Patch 2, USG FLEX series firmware versions 4.50 through 5.36 Patch 2, USG FLEX 50(W) series firmware versions 4.16 through 5.36 Patch 2, USG20(W)-VPN series firmware versions 4.16 through 5.36 P
FLEX 50(W) series firmware versions 4.16 through 5.36 Patch 2, USG20(W)-VPN series firmware versions 4.16 through 5.36 Patch 2, VPN series firmware versions 4.30 through 5.36 Patch 2, NXC2500 firmware versions 6.10(AAIG.0) through 6.10(AAIG.3), and NXC5500 firmware versions 6.10(AAOS.0) through 6.10(AAOS.4), could allow an unauthenticated, LAN-based attacker to cause denial of service (DoS) conditions by sending a crafted request to the CAPWAP daemon. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-firewalls-and-wlan-controllers
CVE ID: CVE-2023-34141 State: PUBLISHED Published: 2023-07-17T17:56:26.818Z Last Updated: 2024-10-29T16:06:41.479Z Severity: HIGH (CVSS 8 CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Zyxel Products: ATP series firmware, USG FLEX series firmware, USG FLEX 50(W) series firmware, USG20(W)-VPN series firmware, VPN series firmware, NXC2500 firmware, NXC5500 firmware Problem Types: CWE-78 Description: A command injection vulnerability in the access point (AP) management feature of the Zyxel ATP series firmware versions 5.00 through 5.36 Patch 2, USG FLEX series firmware versions 5.00 through 5.36 Patch 2, USG FLEX 50(W) series firmware versions 5.00 through 5.36 Patch 2, USG20(W)-VPN ser
versions 5.00 through 5.36 Patch 2, USG FLEX 50(W) series firmware versions 5.00 through 5.36 Patch 2, USG20(W)-VPN series firmware versions 5.00 through 5.36 Patch 2, VPN series firmware versions 5.00 through 5.36 Patch 2, NXC2500 firmware versions 6.10(AAIG.0) through 6.10(AAIG.3), and NXC5500 firmware versions 6.10(AAOS.0) through 6.10(AAOS.4), could allow an unauthenticated, LAN-based attacker to execute some OS commands on an affected device if the attacker could trick an authorized administrator to add their IP address to the managed AP list in advance. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.zyxel.com/global/en/support/sec
alyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.zyxel.com/global/en/support/security-advisories/zyxel-security-advisory-for-multiple-vulnerabilities-in-firewalls-and-wlan-controllers
CVE ID: CVE-2023-34142 State: PUBLISHED Published: 2023-07-18T02:02:27.900Z Last Updated: 2024-10-28T18:09:55.396Z Severity: CRITICAL (CVSS 9 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Hitachi Products: Hitachi Device Manager Problem Types: CWE-319 Description: Cleartext Transmission of Sensitive Information vulnerability in Hitachi Device Manager on Windows, Linux (Device Manager Server, Device Manager Agent, Host Data Collector components) allows Interception.This issue affects Hitachi Device Manager: before 8.8.5-02. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-
ntainer: - CISA ADP Vulnrichment: References: - https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2023-125/index.html
CVE ID: CVE-2023-34143 State: PUBLISHED Published: 2023-07-18T02:03:20.910Z Last Updated: 2024-10-21T18:54:46.219Z Severity: MEDIUM (CVSS 5.6 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: Hitachi Products: Hitachi Device Manager Problem Types: CWE-297 Description: Improper Validation of Certificate with Host Mismatch vulnerability in Hitachi Device Manager on Windows, Linux (Device Manager Server, Device Manager Agent, Host Data Collector components) allows Man in the Middle Attack.This issue affects Hitachi Device Manager: before 8.8.5-02. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.hitachi.com/products/it/software/security/
: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2023-125/index.html
CVE ID: CVE-2023-34144 State: PUBLISHED Published: 2023-06-26T21:57:41.700Z Last Updated: 2024-12-05T14:38:19.835Z Vendors: Trend Micro, Inc. Products: Trend Micro Apex One Description: An untrusted search path vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could allow a local attacker to escalate their privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This is a similar, but not identical vulnerability as CVE-2023-34145. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://succes
CVE-2023-34145. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/000293322?language=en_US - https://www.zerodayinitiative.com/advisories/ZDI-23-835/
CVE ID: CVE-2023-34145 State: PUBLISHED Published: 2023-06-26T21:57:50.324Z Last Updated: 2024-12-05T14:33:33.347Z Vendors: Trend Micro, Inc. Products: Trend Micro Apex One Description: An untrusted search path vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could allow a local attacker to escalate their privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This is a similar, but not identical vulnerability as CVE-2023-34144. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://succes
CVE-2023-34144. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/000293322?language=en_US - https://www.zerodayinitiative.com/advisories/ZDI-23-836/
CVE ID: CVE-2023-34146 State: PUBLISHED Published: 2023-06-26T21:58:00.477Z Last Updated: 2024-12-04T16:08:55.833Z Vendors: Trend Micro, Inc. Products: Trend Micro Apex One Description: An exposed dangerous function vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could allow a local attacker to escalate privileges and write an arbitrary value to specific Trend Micro agent subkeys on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This is a similar, but not identical vulnerability as CVE-2023-34147 and CVE-2023-34148. Additional Analyst
nerability. This is a similar, but not identical vulnerability as CVE-2023-34147 and CVE-2023-34148. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/000293322?language=en_US - https://www.zerodayinitiative.com/advisories/ZDI-23-832/
CVE ID: CVE-2023-34147 State: PUBLISHED Published: 2023-06-26T21:58:09.816Z Last Updated: 2024-12-04T16:08:11.976Z Vendors: Trend Micro, Inc. Products: Trend Micro Apex One Description: An exposed dangerous function vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could allow a local attacker to escalate privileges and write an arbitrary value to specific Trend Micro agent subkeys on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This is a similar, but not identical vulnerability as CVE-2023-34146 and CVE-2023-34148. Additional Analyst
nerability. This is a similar, but not identical vulnerability as CVE-2023-34146 and CVE-2023-34148. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/000293322?language=en_US - https://www.zerodayinitiative.com/advisories/ZDI-23-833/
CVE ID: CVE-2023-34148 State: PUBLISHED Published: 2023-06-26T21:58:19.771Z Last Updated: 2024-12-04T16:07:28.628Z Vendors: Trend Micro, Inc. Products: Trend Micro Apex One Description: An exposed dangerous function vulnerability in the Trend Micro Apex One and Apex One as a Service security agent could allow a local attacker to escalate privileges and write an arbitrary value to specific Trend Micro agent subkeys on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This is a similar, but not identical vulnerability as CVE-2023-34146 and CVE-2023-34147. Additional Analyst
nerability. This is a similar, but not identical vulnerability as CVE-2023-34146 and CVE-2023-34147. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://success.trendmicro.com/dcx/s/solution/000293322?language=en_US - https://www.zerodayinitiative.com/advisories/ZDI-23-834/
CVE ID: CVE-2023-34149 State: PUBLISHED Published: 2023-06-14T07:48:54.926Z Last Updated: 2025-02-13T16:55:20.286Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Apache Software Foundation Products: Apache Struts Problem Types: CWE-770 Description: Allocation of Resources Without Limits or Throttling vulnerability in Apache Software Foundation Apache Struts.This issue affects Apache Struts: through 2.5.30, through 6.1.2. Upgrade to Struts 2.5.31 or 6.1.2.1 or greater. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cwiki.apache.org/confluence/display/WW/S2-063 - http://www.openwall.com/lists/oss-security/202
nt: References: - https://cwiki.apache.org/confluence/display/WW/S2-063 - http://www.openwall.com/lists/oss-security/2023/06/14/2 - https://security.netapp.com/advisory/ntap-20230706-0005/
CVE ID: CVE-2023-34150 State: PUBLISHED Published: 2023-07-05T07:28:35.592Z Last Updated: 2024-08-02T16:01:53.904Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L) Vendors: Apache Software Foundation Products: Apache Any23 Problem Types: CWE-20 Description: ** UNSUPPORTED WHEN ASSIGNED ** Use of TikaEncodingDetector in Apache Any23 can cause excessive memory usage. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://lists.apache.org/thread/713tk23khbtbg940pb2ql8ggd4cvh6j1
CVE ID: CVE-2023-34151 State: PUBLISHED Published: 2023-05-30T00:00:00 Last Updated: 2024-08-02T16:01:54.137Z Vendors: n/a Products: ImageMagick Problem Types: CWE-190 Description: A vulnerability was found in ImageMagick. This security flaw ouccers as an undefined behaviors of casting double to size_t in svg, mvg and other coders (recurring bugs of CVE-2022-32546). Additional Analyst Notes: - CVE Program Container: References: - https://github.com/ImageMagick/ImageMagick/issues/6341 - https://access.redhat.com/security/cve/CVE-2023-34151 - https://bugzilla.redhat.com/show_bug.cgi?id=2210657 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V2
bug.cgi?id=2210657 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V2ZUHZXQ2C3JZYKPW4XHCMVVL467MA2V/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4UFQJCYJ23HWHNDOVKBHZQ7HCXXL6MM3/ - https://lists.debian.org/debian-lts-announce/2024/02/msg00007.html
CVE ID: CVE-2023-34152 State: PUBLISHED Published: 2023-05-30T00:00:00 Last Updated: 2025-01-13T18:36:57.030Z Vendors: n/a Products: ImageMagick Problem Types: CWE-20 Description: A vulnerability was found in ImageMagick. This security flaw cause a remote code execution vulnerability in OpenBlob with --enable-pipes configured. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ImageMagick/ImageMagick/issues/6339 - https://access.redhat.com/security/cve/CVE-2023-34152 - https://bugzilla.redhat.com/show_bug.cgi?id=2210659 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V2ZUHZXQ2C3JZYKPW
659 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V2ZUHZXQ2C3JZYKPW4XHCMVVL467MA2V/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4UFQJCYJ23HWHNDOVKBHZQ7HCXXL6MM3/
CVE ID: CVE-2023-34153 State: PUBLISHED Published: 2023-05-30T00:00:00 Last Updated: 2025-01-10T21:02:45.598Z Vendors: n/a Products: ImageMagick Problem Types: CWE-77 Description: A vulnerability was found in ImageMagick. This security flaw causes a shell command injection vulnerability via video:vsync or video:pixel-format options in VIDEO encoding/decoding. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/ImageMagick/ImageMagick/issues/6338 - https://bugzilla.redhat.com/show_bug.cgi?id=2210660 - https://access.redhat.com/security/cve/CVE-2023-34153 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproj
dhat.com/security/cve/CVE-2023-34153 - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/V2ZUHZXQ2C3JZYKPW4XHCMVVL467MA2V/ - https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4UFQJCYJ23HWHNDOVKBHZQ7HCXXL6MM3/
CVE ID: CVE-2023-34154 State: PUBLISHED Published: 2023-06-16T06:54:01.644Z Last Updated: 2024-12-17T16:54:32.580Z Vendors: Huawei Products: HarmonyOS Problem Types: Permissions, Privileges, and Access Controls Description: Vulnerability of undefined permissions in HUAWEI VR screen projection.Successful exploitation of this vulnerability will cause third-party apps to create windows in an arbitrary way, consuming system resources. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202306-0000001560777672
CVE ID: CVE-2023-34155 State: PUBLISHED Published: 2023-06-19T00:00:00 Last Updated: 2024-12-17T15:27:40.902Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Permissions, Privileges, and Access Controls Description: Vulnerability of unauthorized calling on HUAWEI phones and tablets.Successful exploitation of this vulnerability may affect availability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/6/
CVE ID: CVE-2023-34156 State: PUBLISHED Published: 2023-06-19T00:00:00 Last Updated: 2024-12-17T15:23:28.861Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Services denied Description: Vulnerability of services denied by early fingerprint APIs on HarmonyOS products.Successful exploitation of this vulnerability may cause services to be denied. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/6/
CVE ID: CVE-2023-34157 State: PUBLISHED Published: 2023-06-16T06:55:57.262Z Last Updated: 2024-12-17T16:51:14.050Z Severity: CRITICAL (CVSS 10 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: Huawei Products: HarmonyOS Problem Types: Weaknesses Introduced During Design Description: Vulnerability of HwWatchHealth being hijacked.Successful exploitation of this vulnerability may cause repeated pop-up windows of the app. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://device.harmonyos.com/en/docs/security/update/security-bulletins-202306-0000001560777672
CVE ID: CVE-2023-34158 State: PUBLISHED Published: 2023-06-19T00:00:00 Last Updated: 2024-12-11T17:34:38.627Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Improper Access Control Description: Vulnerability of spoofing trustlists of Huawei desktop.Successful exploitation of this vulnerability can cause third-party apps to hide app icons on the desktop to prevent them from being uninstalled. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/6/
CVE ID: CVE-2023-34159 State: PUBLISHED Published: 2023-06-19T00:00:00 Last Updated: 2024-12-11T17:45:45.318Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Weaknesses Introduced During Design Description: Improper permission control vulnerability in the Notepad app.Successful exploitation of the vulnerability may lead to privilege escalation, which affects availability and confidentiality. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/6/
CVE ID: CVE-2023-34160 State: PUBLISHED Published: 2023-06-19T00:00:00 Last Updated: 2024-12-11T18:25:41.643Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Improper Access Control Description: Vulnerability of spoofing trustlists of Huawei desktop.Successful exploitation of this vulnerability can cause third-party apps to hide app icons on the desktop to prevent them from being uninstalled. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/6/
CVE ID: CVE-2023-34161 State: PUBLISHED Published: 2023-06-19T00:00:00 Last Updated: 2024-12-11T18:44:02.066Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: Configuration Description: nappropriate authorization vulnerability in the SettingsProvider module.Successful exploitation of this vulnerability may cause features to perform abnormally. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/6/
CVE ID: CVE-2023-34162 State: PUBLISHED Published: 2023-06-19T00:00:00 Last Updated: 2024-12-11T18:47:40.857Z Vendors: Huawei Products: HarmonyOS, EMUI Problem Types: External Control of System or Configuration Setting Description: Version update determination vulnerability in the user profile module.Successful exploitation of this vulnerability may cause repeated HMS Core updates and cause services to fail. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://consumer.huawei.com/en/support/bulletin/2023/6/