CVE-2023-24465
Assigner: OpenHarmony
Published: 2023-03-10T10:45:12.940Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: OpenHarmony
vendor: OpenHarmony
versions: lessThanOrEqual: 3.1.4
status: affected
version: 3.1
versionType: custom
lessThanOrEqual: 3.0.7
status: affected
version: 3.0
versionType: custom
datePublic: 2023-03-11T00:00:00.000Z
descriptions: supportingMedia: base64: no
type: text/html
value: Communication Wi-Fi subsystem within OpenHarmony-v3.1.4 and prior versions, OpenHarmony-v3.0.7 and prior versions

<span style="background-color: rgb(255, 255, 255);">has a null pointer reference vulnerability</span><span style="background-color: rgb(255, 255, 255);">&nbsp;</span>which local attackers can exploit this vulnerability to cause the current application to crash.<br>
value: Communication Wi-Fi subsystem within OpenHarmony-v3.1.4 and prior versions, OpenHarmony-v3.0.7 and prior versions

has a null pointer reference vulnerability which local attackers can exploit this vulnerability to cause the current application to crash.

impacts: capecId: CAPEC-6
descriptions: value: CAPEC-6 Argument Injection
metrics: cvssV3_1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: HIGH
baseScore: 5.5
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
version: 3.1
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: cweId: CWE-20
description: CWE-20 Improper Input Validation
type: CWE
source: discovery: UNKNOWN
title: Communication Wi-Fi  subsystem has a null pointer reference vulnerability when receving external data.
x_generator: engine: Vulnogram 0.1.0-dev