deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-0565
Published: 2024-01-15
Description: An out-of-bounds memory read flaw was found in receive_encrypted_standard in fs/smb/client/smb2ops.c in the SMB Client sub-component in the Linux Kernel. This issue occurs due to integer underflow on the memcpy length, leading to a denial of service.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-191, CWE-191
References: https://access.redhat.com/errata/RHSA-2024:1188; https://access.redhat.com/errata/RHSA-2024:1404; https://access.redhat.com/errata/RHSA-2024:1532
CVE: CVE-2023-7206
Published: 2024-01-15
Description: 
In Horner Automation Cscape versions 9.90 SP10 and prior, local attackers are able to exploit this vulnerability if a user opens a malicious CSP file, which would result in execution of arbitrary code on affected installations of Cscape.


CVSS Score: 7.8 (HIGH)
CWE: CWE-121, CWE-787
References: https://hornerautomation.com/cscape-software/; https://www.cisa.gov/news-events/ics-advisories/icsa-24-011-04; https://hornerautomation.com/cscape-software/
CVE: CVE-2023-41619
Published: 2024-01-16
Description: Emlog Pro v2.1.14 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /admin/article.php?action=write.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/GhostBalladw/wuhaozhe-s-CVE/blob/main/CVE-2023-41619; https://github.com/emlog/emlog; https://github.com/GhostBalladw/wuhaozhe-s-CVE/blob/main/CVE-2023-41619
CVE: CVE-2023-47459
Published: 2024-01-16
Description: An issue in Knovos Discovery v.22.67.0 allows a remote attacker to obtain sensitive information via the /DiscoveryReview/Service/CaseManagement.svc/GetProductSiteName component.
CVSS Score: 6.5 (MEDIUM)
References: https://github.com/aleksey-vi/CVE-2023-47459; https://www.knovos.com; https://github.com/aleksey-vi/CVE-2023-47459
CVE: CVE-2023-47460
Published: 2024-01-16
Description: SQL injection vulnerability in Knovos Discovery v.22.67.0 allows a remote attacker to execute arbitrary code via the /DiscoveryProcess/Service/Admin.svc/getGridColumnStructure component.
CVSS Score: 8.8 (HIGH)
CWE: CWE-89, CWE-89
References: https://github.com/aleksey-vi/CVE-2023-47460; https://www.knovos.com; https://github.com/aleksey-vi/CVE-2023-47460
CVE: CVE-2023-48104
Published: 2024-01-16
Description: Alinto SOGo before 5.9.1 is vulnerable to HTML Injection.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-79
References: https://github.com/Alinto/sogo/commit/7481ccf37087c3f456d7e5a844da01d0f8883098; https://github.com/E1tex/CVE-2023-48104; https://habr.com/ru/articles/804863/
CVE: CVE-2023-49106
Published: 2024-01-16
Description: Missing Password Field Masking vulnerability in Hitachi Device Manager on Windows, Linux (Device Manager Agent component).This issue affects Hitachi Device Manager: before 8.8.5-04.


CVSS Score: 4.6 (MEDIUM)
CWE: CWE-549, CWE-522
References: https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2024-101/index.html; https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2024-101/index.html
CVE: CVE-2023-49107
Published: 2024-01-16
Description: Generation of Error Message Containing Sensitive Information vulnerability in Hitachi Device Manager on Windows, Linux (Device Manager Agent modules).This issue affects Hitachi Device Manager: before 8.8.5-04.


CVSS Score: 5.3 (MEDIUM)
CWE: CWE-209, CWE-209
References: https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2024-101/index.html; https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2024-101/index.html
CVE: CVE-2023-51810
Published: 2024-01-16
Description: SQL injection vulnerability in StackIdeas EasyDiscuss v.5.0.5 and fixed in v.5.0.10 allows a remote attacker to obtain sensitive information via a crafted request to the search parameter in the Users module.
CVSS Score: 7.5 (HIGH)
CWE: CWE-89, CWE-89
References: http://easydiscuss.com; http://stackideas.com; https://github.com/Pastea/CVE-2023-51810
CVE: CVE-2023-6457
Published: 2024-01-16
Description: Incorrect Default Permissions vulnerability in Hitachi Tuning Manager on Windows (Hitachi Tuning Manager server component) allows local users to read and write specific files.This issue affects Hitachi Tuning Manager: before 8.8.5-04.


CVSS Score: 6.6 (MEDIUM)
CWE: CWE-276, CWE-276
References: https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2024-104/index.html; https://www.hitachi.com/products/it/software/security/info/vuls/hitachi-sec-2024-104/index.html
CVE: CVE-2023-43449
Published: 2024-01-16
Description: An issue in HummerRisk HummerRisk v.1.10 thru 1.4.1 allows an authenticated attacker to execute arbitrary code via a crafted request to the service/LicenseService component.
CVSS Score: 8.8 (HIGH)
CWE: CWE-94, CWE-94
References: https://github.com/HummerRisk/HummerRisk/issues/446; https://github.com/HummerRisk/HummerRisk/issues/446
CVE: CVE-2023-51059
Published: 2024-01-16
Description: An issue in MOKO TECHNOLOGY LTD MOKOSmart MKGW1 BLE Gateway v.1.1.1 and before allows a remote attacker to escalate privileges via the session management component of the administrative web interface.
CVSS Score: 8.8 (HIGH)
References: https://github.com/sbaresearch/advisories/tree/public/2022/SBA-ADV-20220120-01_MOKOSmart_MKGW1_Gateway_Improper_Session_Management; https://www.mokosmart.com/wp-content/uploads/2019/10/GS-gateway.pdf; http://seclists.org/fulldisclosure/2024/Jan/6
CVE: CVE-2023-51257
Published: 2024-01-16
Description: An invalid memory write issue in Jasper-Software Jasper v.4.1.1 and before allows a local attacker to execute arbitrary code.
CVSS Score: 7.8 (HIGH)
CWE: CWE-119, CWE-119
References: https://github.com/jasper-software/jasper/issues/367; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HNTGL7I5IJSQ4BZ5MGKWJPQYICUMHQ5I/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MBF5KYWCZVIDMITRX7GBVWGNWKAMQORZ/
CVE: CVE-2023-51282
Published: 2024-01-16
Description: An issue in mingSoft MCMS v.5.2.4 allows a a remote attacker to obtain sensitive information via a crafted script to the password parameter.
CVSS Score: 7.5 (HIGH)
CWE: CWE-94, CWE-94
References: https://gitee.com/mingSoft/MCMS/issues/I4Q4NV; https://github.com/tanalala/CVE/blob/main/Code.md; https://gitee.com/mingSoft/MCMS/issues/I4Q4NV
CVE: CVE-2024-22362
Published: 2024-01-16
Description: Drupal contains a vulnerability with improper handling of structural elements. If this vulnerability is exploited, an attacker may be able to cause a denial-of-service (DoS) condition.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://github.com/drupal/drupal; https://jvn.jp/en/jp/JVN63383723/; https://www.drupal.org/
CVE: CVE-2024-22428
Published: 2024-01-16
Description: 
Dell iDRAC Service Module, versions 5.2.0.0 and prior, contain an Incorrect Default Permissions vulnerability. It may allow a local unprivileged user to escalate privileges and execute arbitrary code on the affected system. Dell recommends customers upgrade at the earliest opportunity.


CVSS Score: 7.0 (HIGH)
CWE: CWE-276, CWE-276
References: https://www.dell.com/support/kbdoc/en-us/000221129/dsa-2024-018-security-update-for-dell-idrac-service-module-for-weak-folder-permission-vulnerabilities; https://www.dell.com/support/kbdoc/en-us/000221129/dsa-2024-018-security-update-for-dell-idrac-service-module-for-weak-folder-permission-vulnerabilities
CVE: CVE-2023-22526
Published: 2024-01-16
Description: This High severity RCE (Remote Code Execution) vulnerability was introduced in version 7.19.0 of Confluence Data Center.

This RCE (Remote Code Execution) vulnerability, with a CVSS Score of 7.2, allows an authenticated attacker to execute arbitrary code which has high impact to confidentiality, high impact to integrity, high impact to availability, and requires no user interaction.

Atlassian recommends that Confluence Data Center customers upgrade to latest version, if you are unable to do so, upgrade your instance to one of the specified supported fixed versions:
 Confluence Data Center and Server 7.19: Upgrade to a release 7.19.17, or any higher 7.19.x release
 Confluence Data Center and Server 8.5: Upgrade to a release 8.5.5 or any higher 8.5.x release
 Confluence Data Center and Server 8.7: Upgrade to a release 8.7.2 or any higher release

See the release notes ([https://confluence.atlassian.com/doc/confluence-release-notes-327.html]). You can download the latest version of Confluence Data Center from the download center ([https://www.atlassian.com/software/confluence/download-archives]).

This vulnerability was discovered by m1sn0w and reported via our Bug Bounty program
CVSS Score: 8.8 (HIGH)
CWE: CWE-94, CWE-94
References: https://confluence.atlassian.com/pages/viewpage.action?pageId=[PII_REDACTED]; https://jira.atlassian.com/browse/CONFSERVER-93516; https://confluence.atlassian.com/pages/viewpage.action?pageId=[PII_REDACTED]
CVE: CVE-2023-22527
Published: 2024-01-16
Description: A template injection vulnerability on older versions of Confluence Data Center and Server allows an unauthenticated attacker to achieve RCE on an affected instance. Customers using an affected version must take immediate action.

Most recent supported versions of Confluence Data Center and Server are not affected by this vulnerability as it was ultimately mitigated during regular version updates. However, Atlassian recommends that customers take care to install the latest version to protect their instances from non-critical vulnerabilities outlined in Atlassian’s January Security Bulletin.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-74, CWE-74
References: http://packetstormsecurity.com/files/176789/Atlassian-Confluence-SSTI-Injection.html; https://confluence.atlassian.com/pages/viewpage.action?pageId=[PII_REDACTED]; https://jira.atlassian.com/browse/CONFSERVER-93833
CVE: CVE-2024-21672
Published: 2024-01-16
Description: This High severity Remote Code Execution (RCE) vulnerability was introduced in version 2.1.0 of Confluence Data Center and Server.

Remote Code Execution (RCE) vulnerability, with a CVSS Score of 8.3 and a CVSS Vector of CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H allows an unauthenticated attacker to remotely expose assets in your environment susceptible to exploitation which has high impact to confidentiality, high impact to integrity, high impact to availability, and requires user interaction.

Atlassian recommends that Confluence Data Center and Server customers upgrade to latest version, if you are unable to do so, upgrade your instance to one of the specified supported fixed versions:

* Confluence Data Center and Server 7.19: Upgrade to a release 7.19.18, or any higher 7.19.x release
* Confluence Data Center and Server 8.5: Upgrade to a release 8.5.5 or any higher 8.5.x release
* Confluence Data Center and Server 8.7: Upgrade to a release 8.7.2 or any higher release

See the release notes (https://confluence.atlassian.com/doc/confluence-release-notes-327.html ). You can download the latest version of Confluence Data Center and Server from the download center (https://www.atlassian.com/software/confluence/download-archives).
CVSS Score: 8.8 (HIGH)
CWE: CWE-94, CWE-94
References: https://jira.atlassian.com/browse/CONFSERVER-94064; https://confluence.atlassian.com/security/security-bulletin-january-16-2[PII_REDACTED]615.html; https://jira.atlassian.com/browse/CONFSERVER-94064
CVE: CVE-2024-21673
Published: 2024-01-16
Description: This High severity Remote Code Execution (RCE) vulnerability was introduced in versions 7.13.0 of Confluence Data Center and Server.

Remote Code Execution (RCE) vulnerability, with a CVSS Score of 8.0 and a CVSS Vector of CVSS:3.0/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H allows an authenticated attacker to expose assets in your environment susceptible to exploitation which has high impact to confidentiality, high impact to integrity, high impact to availability, and does not require user interaction.

Atlassian recommends that Confluence Data Center and Server customers upgrade to latest version, if you are unable to do so, upgrade your instance to one of the specified supported fixed versions:

* Confluence Data Center and Server 7.19: Upgrade to a release 7.19.18, or any higher 7.19.x release
* Confluence Data Center and Server 8.5: Upgrade to a release 8.5.5 or any higher 8.5.x release
* Confluence Data Center and Server 8.7: Upgrade to a release 8.7.2 or any higher release

See the release notes (https://confluence.atlassian.com/doc/confluence-release-notes-327.html ). You can download the latest version of Confluence Data Center and Server from the download center (https://www.atlassian.com/software/confluence/download-archives ).
CVSS Score: 8.8 (HIGH)
CWE: CWE-94, CWE-94
References: https://jira.atlassian.com/browse/CONFSERVER-94065; https://confluence.atlassian.com/security/security-bulletin-january-16-2[PII_REDACTED]615.html; https://jira.atlassian.com/browse/CONFSERVER-94065
CVE: CVE-2024-21674
Published: 2024-01-16
Description: This High severity Remote Code Execution (RCE) vulnerability was introduced in version 7.13.0 of Confluence Data Center and Server.

Remote Code Execution (RCE) vulnerability, with a CVSS Score of 8.6 and a CVSS Vector of CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N allows an unauthenticated attacker to expose assets in your environment susceptible to exploitation which has high impact to confidentiality, no impact to integrity, no impact to availability, and does not require user interaction.

Atlassian recommends that Confluence Data Center and Server customers upgrade to latest version, if you are unable to do so, upgrade your instance to one of the specified supported fixed versions:

* Confluence Data Center and Server 7.19: Upgrade to a release 7.19.18, or any higher 7.19.x release
* Confluence Data Center and Server 8.5: Upgrade to a release 8.5.5 or any higher 8.5.x release
* Confluence Data Center and Server 8.7: Upgrade to a release 8.7.2 or any higher release

See the release notes (https://confluence.atlassian.com/doc/confluence-release-notes-327.html ). You can download the latest version of Confluence Data Center and Server from the download center (https://www.atlassian.com/software/confluence/download-archives ).
CVSS Score: 7.5 (HIGH)
CWE: CWE-94, CWE-94
References: https://jira.atlassian.com/browse/CONFSERVER-94066; https://confluence.atlassian.com/security/security-bulletin-january-16-2[PII_REDACTED]615.html; https://jira.atlassian.com/browse/CONFSERVER-94066
CVE: CVE-2011-10005
Published: 2024-01-16
Description: A vulnerability, which was classified as critical, was found in EasyFTP 1.7.0.2. Affected is an unknown function of the component MKD Command Handler. The manipulation leads to buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-250716.
CVSS Score: 6.3 (MEDIUM)
CWE: CWE-120
References: https://vuldb.com/?ctiid.250716; https://vuldb.com/?id.250716; https://www.exploit-db.com/exploits/17354
CVE: CVE-2023-44112
Published: 2024-01-16
Description: Out-of-bounds access vulnerability in the device authentication module. Successful exploitation of this vulnerability may affect confidentiality.
CVSS Score: 7.5 (HIGH)
CWE: CWE-200, CWE-125
References: https://consumer.huawei.com/en/support/bulletin/2024/1/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202401-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2024/1/
CVE: CVE-2023-44117
Published: 2024-01-16
Description: Vulnerability of trust relationships being inaccurate in distributed scenarios. Successful exploitation of this vulnerability may affect service confidentiality.
CVSS Score: 7.5 (HIGH)
CWE: CWE-290
References: https://consumer.huawei.com/en/support/bulletin/2024/1/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202401-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2024/1/
CVE: CVE-2023-4566
Published: 2024-01-16
Description: Vulnerability of trust relationships being inaccurate in distributed scenarios. Successful exploitation of this vulnerability may affect service confidentiality.
CVSS Score: 7.5 (HIGH)
CWE: CWE-290
References: https://consumer.huawei.com/en/support/bulletin/2024/1/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202401-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2024/1/
CVE: CVE-2023-52109
Published: 2024-01-16
Description: Vulnerability of trust relationships being inaccurate in distributed scenarios. Successful exploitation of this vulnerability may affect service confidentiality.
CVSS Score: 7.5 (HIGH)
CWE: CWE-345
References: https://consumer.huawei.com/en/support/bulletin/2024/1/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202401-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2024/1/
CVE: CVE-2023-52110
Published: 2024-01-16
Description: The sensor module has an out-of-bounds access vulnerability.Successful exploitation of this vulnerability may affect availability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-787, CWE-787
References: https://consumer.huawei.com/en/support/bulletin/2024/1/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202401-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2024/1/
CVE: CVE-2023-52111
Published: 2024-01-16
Description: Authorization vulnerability in the BootLoader module. Successful exploitation of this vulnerability may affect service integrity.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287, CWE-863
References: https://consumer.huawei.com/en/support/bulletin/2024/1/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202401-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2024/1/
CVE: CVE-2023-52112
Published: 2024-01-16
Description: Unauthorized file access vulnerability in the wallpaper service module. Successful exploitation of this vulnerability may cause features to perform abnormally.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-552, CWE-552
References: https://consumer.huawei.com/en/support/bulletin/2024/1/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202401-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2024/1/
CVE: CVE-2023-52113
Published: 2024-01-16
Description: launchAnyWhere vulnerability in the ActivityManagerService module. Successful exploitation of this vulnerability will affect availability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400
References: https://consumer.huawei.com/en/support/bulletin/2024/1/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202401-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2024/1/
CVE: CVE-2023-52098
Published: 2024-01-16
Description: Denial of Service (DoS) vulnerability in the DMS module. Successful exploitation of this vulnerability will affect availability.
CVSS Score: 7.5 (HIGH)
CWE: CWE-400, CWE-400, CWE-116
References: https://consumer.huawei.com/en/support/bulletin/2024/1/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202401-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2024/1/
CVE: CVE-2023-52107
Published: 2024-01-16
Description: Vulnerability of permissions being not strictly verified in the WMS module. Successful exploitation of this vulnerability may affect service confidentiality.
CVSS Score: 7.5 (HIGH)
CWE: CWE-269, CWE-732
References: https://consumer.huawei.com/en/support/bulletin/2024/1/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202401-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2024/1/
CVE: CVE-2023-52108
Published: 2024-01-16
Description: Vulnerability of process priorities being raised in the ActivityManagerService module. Successful exploitation of this vulnerability will affect availability.
CVSS Score: 7.5 (HIGH)
References: https://consumer.huawei.com/en/support/bulletin/2024/1/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202401-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2024/1/
CVE: CVE-2023-52114
Published: 2024-01-16
Description: Data confidentiality vulnerability in the ScreenReader module. Successful exploitation of this vulnerability may affect service integrity.
CVSS Score: 7.5 (HIGH)
CWE: CWE-269, CWE-284
References: https://consumer.huawei.com/en/support/bulletin/2024/1/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202401-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2024/1/
CVE: CVE-2023-52115
Published: 2024-01-16
Description: The iaware module has a Use-After-Free (UAF) vulnerability. Successful exploitation of this vulnerability may affect the system functions.
CVSS Score: 7.5 (HIGH)
CWE: CWE-416, CWE-416
References: https://consumer.huawei.com/en/support/bulletin/2024/1/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202401-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2024/1/
CVE: CVE-2023-52116
Published: 2024-01-16
Description: Permission management vulnerability in the multi-screen interaction module. Successful exploitation of this vulnerability may cause service exceptions of the device.
CVSS Score: 7.5 (HIGH)
CWE: CWE-269, CWE-732
References: https://consumer.huawei.com/en/support/bulletin/2024/1/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202401-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2024/1/
CVE: CVE-2023-34063
Published: 2024-01-16
Description: Aria Automation contains a Missing Access Control vulnerability.


An authenticated malicious actor may 
exploit this vulnerability leading to unauthorized access to remote 
organizations and workflows.


CVSS Score: 9.9 (CRITICAL)
CWE: CWE-862, CWE-862
References: https://www.vmware.com/security/advisories/VMSA-2024-0001.html; https://www.vmware.com/security/advisories/VMSA-2024-0001.html
CVE: CVE-2023-52099
Published: 2024-01-16
Description: Vulnerability of foreground service restrictions being bypassed in the NMS module. Successful exploitation of this vulnerability may affect service confidentiality.
CVSS Score: 7.5 (HIGH)
CWE: CWE-284
References: https://consumer.huawei.com/en/support/bulletin/2024/1/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202401-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2024/1/
CVE: CVE-2023-52100
Published: 2024-01-16
Description: The Celia Keyboard module has a vulnerability in access control. Successful exploitation of this vulnerability may affect availability.
CVSS Score: 7.5 (HIGH)
References: https://consumer.huawei.com/en/support/bulletin/2024/1/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202401-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2024/1/
CVE: CVE-2023-52101
Published: 2024-01-16
Description: Component exposure vulnerability in the Wi-Fi module. Successful exploitation of this vulnerability may affect service availability and integrity.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-200
References: https://consumer.huawei.com/en/support/bulletin/2024/1/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202401-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2024/1/
CVE: CVE-2023-52102
Published: 2024-01-16
Description: Vulnerability of parameters being not verified in the WMS module. Successful exploitation of this vulnerability may affect service confidentiality.
CVSS Score: 7.5 (HIGH)
CWE: CWE-116
References: https://consumer.huawei.com/en/support/bulletin/2024/1/; https://device.harmonyos.com/en/docs/security/update/security-bulletins-202401-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2024/1/
CVE: CVE-2023-52103
Published: 2024-01-16
Description: Buffer overflow vulnerability in the FLP module. Successful exploitation of this vulnerability may cause out-of-bounds read.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-120, CWE-120
References: https://consumer.huawei.com/en/support/bulletin/2024/1/; https://https://device.harmonyos.com/en/docs/security/update/security-bulletins-202401-[PII_REDACTED]; https://consumer.huawei.com/en/support/bulletin/2024/1/