CVE-2023-41306

CVSS v3 3.7 LOW

3.7^/10

CVSS v3 : LOW

Vector :

Exploitability : 2.2 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

V

ulnerability of mutex management in the bone voice ID trusted application (TA) module. Successful exploitation of this vulnerability may cause the bone voice ID feature to be unavailable.

References

Link	Resource
https://consumer.huawei.com/en/support/bulletin/2023/9/	Vendor Advisory
https://device.harmonyos.com/en/docs/security/update/security-bulletins-202309-0000001638925158	Vendor Advisory
https://consumer.huawei.com/en/support/bulletin/2023/9/	Vendor Advisory
https://device.harmonyos.com/en/docs/security/update/security-bulletins-202309-0000001638925158	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:huawei:emui:12.0:::::::*
	cpe:2.3:o:huawei:emui:12.0.1:::::::*
	cpe:2.3:o:huawei:harmonyos:2.0.0:::::::*
	cpe:2.3:o:huawei:harmonyos:2.0.1:::::::*

History

21 Nov 2024, 08:21

Type	Values Removed	Values Added
References	~~() https://consumer.huawei.com/en/support/bulletin/2023/9/ - Vendor Advisory~~	() https://consumer.huawei.com/en/support/bulletin/2023/9/ - Vendor Advisory
References	~~() https://device.harmonyos.com/en/docs/security/update/security-bulletins-202309-0000001638925158 - Vendor Advisory~~	() https://device.harmonyos.com/en/docs/security/update/security-bulletins-202309-0000001638925158 - Vendor Advisory

Information

Published : 2023-09-27 15:19

Updated : 2024-11-21 08:21

NVD link : CVE-2023-41306

Mitre link : CVE-2023-41306

CVE.ORG link : CVE-2023-41306

JSON object : View

Products Affected

CWE

CWE-362

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

{"id": "CVE-2023-41306", "metrics": {"cvssMetricV31": [{"type": "Primary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.7, "attackVector": "NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 2.2}]}, "published": "2023-09-27T15:19:28.560", "references": [{"url": "https://consumer.huawei.com/en/support/bulletin/2023/9/", "tags": ["Vendor Advisory"], "source": "[email protected]"}, {"url": "https://device.harmonyos.com/en/docs/security/update/security-bulletins-202309-0000001638925158", "tags": ["Vendor Advisory"], "source": "[email protected]"}, {"url": "https://consumer.huawei.com/en/support/bulletin/2023/9/", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://device.harmonyos.com/en/docs/security/update/security-bulletins-202309-0000001638925158", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-362"}]}, {"type": "Primary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-362"}]}], "descriptions": [{"lang": "en", "value": "Vulnerability of mutex management in the bone voice ID trusted application (TA) module. Successful exploitation of this vulnerability may cause the bone voice ID feature to be unavailable."}, {"lang": "es", "value": "Vulnerabilidad de la gesti\u00f3n de mutex en el m\u00f3dulo de aplicaci\u00f3n confiable (TA) de identificaci\u00f3n de voz bone. La explotaci\u00f3n exitosa de esta vulnerabilidad puede hacer que la funci\u00f3n de identificaci\u00f3n de voz bone no est\u00e9 disponible."}], "lastModified": "2024-11-21T08:21:02.040", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:huawei:emui:12.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "81995662-9C41-4E88-888D-C50703F858F8"}, {"criteria": "cpe:2.3:o:huawei:emui:12.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2DF07E7F-3A18-4B74-B73D-DF3647C2A48F"}, {"criteria": "cpe:2.3:o:huawei:harmonyos:2.0.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "20112231-B840-44D3-A061-B9B9F80EE378"}, {"criteria": "cpe:2.3:o:huawei:harmonyos:2.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "64118936-E2A5-4935-8594-29DF29B5475A"}], "operator": "OR"}]}], "sourceIdentifier": "[email protected]"}