Security Vulnerabilities - CVEs Published In September 2023
Vulnerability of unauthorized API access in the PMS module. Successful exploitation of this vulnerability may cause features to perform abnormally.
CVSS Score
7.5
EPSS Score
0.001
Published
2023-09-25
Redirection permission verification vulnerability in the home screen module. Successful exploitation of this vulnerability may cause features to perform abnormally.
CVSS Score
7.5
EPSS Score
0.001
Published
2023-09-25
Command injection vulnerability in the distributed file system module. Successful exploitation of this vulnerability may cause variables in the sock structure to be modified.
CVSS Score
7.5
EPSS Score
0.002
Published
2023-09-25
Input verification vulnerability in the fingerprint module. Successful exploitation of this vulnerability will affect confidentiality, integrity, and availability.
CVSS Score
9.8
EPSS Score
0.002
Published
2023-09-25
Data security classification vulnerability in the DDMP module. Successful exploitation of this vulnerability may affect confidentiality.
CVSS Score
7.5
EPSS Score
0.002
Published
2023-09-25
Vulnerability of defects introduced in the design process in the HiviewTunner module. Successful exploitation of this vulnerability may cause service hijacking.
CVSS Score
9.8
EPSS Score
0.002
Published
2023-09-25
Vulnerability of permission control in the window module. Successful exploitation of this vulnerability may affect confidentiality.
CVSS Score
7.5
EPSS Score
0.002
Published
2023-09-25
DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart.
CVSS Score
7.5
EPSS Score
0.001
Published
2023-09-25
An issue in Gevent before version 23.9.0 allows a remote attacker to escalate privileges via a crafted script to the WSGIServer component.
CVSS Score
9.8
EPSS Score
0.026
Published
2023-09-25
The DP module has a service hijacking vulnerability.Successful exploitation of this vulnerability may affect some Super Device services.
CVSS Score
9.8
EPSS Score
0.002
Published
2023-09-25