Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file
References
Link | Resource |
---|---|
https://www.hihonor.com/global/security/cve-2023-23436/ | Vendor Advisory |
Configurations
History
04 Jan 2024, 23:04
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.1 |
CPE | cpe:2.3:o:hihonor:magic_os:*:*:*:*:*:*:*:* | |
CWE | CWE-347 | |
References | () https://www.hihonor.com/global/security/cve-2023-23436/ - Vendor Advisory |
29 Dec 2023, 03:13
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-12-29 02:15
Updated : 2024-02-05 00:22
NVD link : CVE-2023-23436
Mitre link : CVE-2023-23436
CVE.ORG link : CVE-2023-23436
JSON object : View
Products Affected
hihonor
- magic_os
CWE
CWE-347
Improper Verification of Cryptographic Signature