Vulnerability Details CVE-2023-44093
Vulnerability of package names' public keys not being verified in the security module.Successful exploitation of this vulnerability may affect service confidentiality.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 24.8%
CVSS Severity
CVSS v3 Score 7.5
References
- https://consumer.huawei.com/en/support/bulletin/2023/10/
- https://device.harmonyos.com/en/docs/security/update/security-bulletins-202310-0000001663676540
- https://consumer.huawei.com/en/support/bulletin/2023/10/
- https://device.harmonyos.com/en/docs/security/update/security-bulletins-202310-0000001663676540
Products affected by CVE-2023-44093
-
cpe:2.3:o:huawei:emui:11.0.1
-
cpe:2.3:o:huawei:emui:12.0
-
cpe:2.3:o:huawei:emui:12.0.1
-
cpe:2.3:o:huawei:emui:13.0.0
-
cpe:2.3:o:huawei:harmonyos:2.0
-
cpe:2.3:o:huawei:harmonyos:2.0.1
-
cpe:2.3:o:huawei:harmonyos:2.1.0
-
cpe:2.3:o:huawei:harmonyos:3.0.0
-
cpe:2.3:o:huawei:harmonyos:3.1.0