CVE-2023-23436
Assigner: Honor
Published: 2023-12-29T02:12:01.783Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: Magic OS	
vendor: Honor
versions: lessThan: 7.1.0.100
status: affected
version: 7.0
versionType: custom
descriptions: supportingMedia: base64: no
type: text/html
value: <p>

<span style="background-color: rgb(255, 255, 255);">Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file</span>

<br></p>
value: 
Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file





metrics: cvssV3_1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: LOW
baseScore: 7.3
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: LOW
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
version: 3.1
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: cweId: CWE-347
description: CWE-347 Improper Verification of Cryptographic Signature
type: CWE
source: discovery: UNKNOWN
x_generator: engine: Vulnogram 0.1.0-dev