CVE-2023-39392

Description

Vulnerability of insecure signatures in the OsuLogin module. Successful exploitation of this vulnerability may cause OsuLogin to be maliciously modified and overwritten.

Related CPE's

ohuaweiharmonyos3.0.0*******

ohuaweiemui12.0.1*******

ohuaweiharmonyos2.0.1*******

ohuaweiharmonyos3.1.0*******

ohuaweiemui13.0.0*******

References

https://device.harmonyos.com/en/docs/security/update/security-bulletins-202308-0000001667644725

Vendor Advisory

https://consumer.huawei.com/en/support/bulletin/2023/8/

Vendor Advisory

CvssV3 impact

Could not find any metrics

CvssV2 impact

Could not find any metrics
Created by Yello
About Severity.io