Search

Find a vulnerability

Search criteria Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.

    44 vulnerabilities by hihonor

    CVE-2023-51435 (GCVE-0-2023-51435)

    Vulnerability from cvelistv5 – Published: 2023-12-29 03:51 – Updated: 2025-04-17 20:21
    VLAI
    Summary
    Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak.
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-269 - Improper Privilege Management
    Assigner
    Impacted products
    Vendor Product Version
    Honor Magic UI Affected: 6.0 , < 6.1.0.212 (custom)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-02T22:32:09.383Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://www.hihonor.com/global/security/cve-2023-51435/"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2023-51435",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "yes"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2024-01-03T16:38:06.303616Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-269",
                    "description": "CWE-269 Improper Privilege Management",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2025-04-17T20:21:51.799Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "Magic UI",
              "vendor": "Honor",
              "versions": [
                {
                  "lessThan": "6.1.0.212",
                  "status": "affected",
                  "version": "6.0",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\n\n\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eSome Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak.\u003c/span\u003e\n\n"
                }
              ],
              "value": "\nSome Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak.\n\n"
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "NONE",
                "baseScore": 7.1,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2023-12-29T03:51:46.940Z",
            "orgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4",
            "shortName": "Honor"
          },
          "references": [
            {
              "url": "https://www.hihonor.com/global/security/cve-2023-51435/"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "x_generator": {
            "engine": "Vulnogram 0.1.0-dev"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4",
        "assignerShortName": "Honor",
        "cveId": "CVE-2023-51435",
        "datePublished": "2023-12-29T03:51:46.940Z",
        "dateReserved": "2023-12-19T01:27:50.842Z",
        "dateUpdated": "2025-04-17T20:21:51.799Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2023-51434 (GCVE-0-2023-51434)

    Vulnerability from cvelistv5 – Published: 2023-12-29 03:49 – Updated: 2024-08-02 22:32
    VLAI
    Summary
    Some Honor products are affected by buffer overflow vulnerability, successful exploitation could cause code execution.
    Assigner
    Impacted products
    Vendor Product Version
    Honor Magic UI Affected: 6.0 , < 6.1.0.212 (custom)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-02T22:32:09.460Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://www.hihonor.com/global/security/cve-2023-51434/"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "Magic UI",
              "vendor": "Honor",
              "versions": [
                {
                  "lessThan": "6.1.0.212",
                  "status": "affected",
                  "version": "6.0",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\n\n\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eSome Honor products are affected by buffer overflow vulnerability, successful exploitation could cause code execution.\u003c/span\u003e\n\n"
                }
              ],
              "value": "\nSome Honor products are affected by buffer overflow vulnerability, successful exploitation could cause code execution.\n\n"
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 9.3,
                "baseSeverity": "CRITICAL",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2023-12-29T03:49:46.394Z",
            "orgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4",
            "shortName": "Honor"
          },
          "references": [
            {
              "url": "https://www.hihonor.com/global/security/cve-2023-51434/"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "x_generator": {
            "engine": "Vulnogram 0.1.0-dev"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4",
        "assignerShortName": "Honor",
        "cveId": "CVE-2023-51434",
        "datePublished": "2023-12-29T03:49:46.394Z",
        "dateReserved": "2023-12-19T01:27:50.842Z",
        "dateUpdated": "2024-08-02T22:32:09.460Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2023-51433 (GCVE-0-2023-51433)

    Vulnerability from cvelistv5 – Published: 2023-12-29 03:47 – Updated: 2024-08-02 22:32
    VLAI
    Summary
    Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak.
    Assigner
    Impacted products
    Vendor Product Version
    Honor Magic UI Affected: 6.0 , < 6.1.0.212 (custom)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-02T22:32:09.415Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://www.hihonor.com/global/security/cve-2023-51433/"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "Magic UI",
              "vendor": "Honor",
              "versions": [
                {
                  "lessThan": "6.1.0.212",
                  "status": "affected",
                  "version": "6.0",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\n\n\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eSome Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak.\u003c/span\u003e\n\n"
                }
              ],
              "value": "\nSome Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak.\n\n"
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "HIGH",
                "attackVector": "LOCAL",
                "availabilityImpact": "NONE",
                "baseScore": 2.9,
                "baseSeverity": "LOW",
                "confidentialityImpact": "LOW",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2023-12-29T03:47:34.013Z",
            "orgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4",
            "shortName": "Honor"
          },
          "references": [
            {
              "url": "https://www.hihonor.com/global/security/cve-2023-51433/"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "x_generator": {
            "engine": "Vulnogram 0.1.0-dev"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4",
        "assignerShortName": "Honor",
        "cveId": "CVE-2023-51433",
        "datePublished": "2023-12-29T03:47:34.013Z",
        "dateReserved": "2023-12-19T01:27:50.842Z",
        "dateUpdated": "2024-08-02T22:32:09.415Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2023-51432 (GCVE-0-2023-51432)

    Vulnerability from cvelistv5 – Published: 2023-12-29 03:45 – Updated: 2024-08-02 22:32
    VLAI
    Summary
    Some Honor products are affected by out of bounds read vulnerability, successful exploitation could cause information leak.
    Assigner
    Impacted products
    Vendor Product Version
    Honor Magic UI Affected: 6.0 , < 6.1.0.212 (custom)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-02T22:32:09.424Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://www.hihonor.com/global/security/cve-2023-51432/"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "Magic UI",
              "vendor": "Honor",
              "versions": [
                {
                  "lessThan": "6.1.0.212",
                  "status": "affected",
                  "version": "6.0",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\n\n\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eSome Honor products are affected by out of bounds read vulnerability, successful exploitation could cause information leak.\u003c/span\u003e\n\n"
                }
              ],
              "value": "\nSome Honor products are affected by out of bounds read vulnerability, successful exploitation could cause information leak.\n\n"
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "NONE",
                "baseScore": 3.2,
                "baseSeverity": "LOW",
                "confidentialityImpact": "LOW",
                "integrityImpact": "NONE",
                "privilegesRequired": "HIGH",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2023-12-29T03:45:42.193Z",
            "orgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4",
            "shortName": "Honor"
          },
          "references": [
            {
              "url": "https://www.hihonor.com/global/security/cve-2023-51432/"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "x_generator": {
            "engine": "Vulnogram 0.1.0-dev"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4",
        "assignerShortName": "Honor",
        "cveId": "CVE-2023-51432",
        "datePublished": "2023-12-29T03:45:42.193Z",
        "dateReserved": "2023-12-19T01:27:50.842Z",
        "dateUpdated": "2024-08-02T22:32:09.424Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2023-51431 (GCVE-0-2023-51431)

    Vulnerability from cvelistv5 – Published: 2023-12-29 03:43 – Updated: 2024-08-02 22:32
    VLAI
    Summary
    Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions.
    Assigner
    Impacted products
    Vendor Product Version
    Honor com.hihonor.phoneservice Affected: 11.0.0.241 , < 11.0.0.243 (custom)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-02T22:32:09.443Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://www.hihonor.com/global/security/cve-2023-51431/"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "com.hihonor.phoneservice\t",
              "vendor": "Honor",
              "versions": [
                {
                  "lessThan": "11.0.0.243",
                  "status": "affected",
                  "version": "11.0.0.241",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\n\n\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eSome Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions.\u003c/span\u003e\n\n"
                }
              ],
              "value": "\nSome Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions.\n\n"
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "HIGH",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2023-12-29T03:43:09.979Z",
            "orgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4",
            "shortName": "Honor"
          },
          "references": [
            {
              "url": "https://www.hihonor.com/global/security/cve-2023-51431/"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "x_generator": {
            "engine": "Vulnogram 0.1.0-dev"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4",
        "assignerShortName": "Honor",
        "cveId": "CVE-2023-51431",
        "datePublished": "2023-12-29T03:43:09.979Z",
        "dateReserved": "2023-12-19T01:27:50.841Z",
        "dateUpdated": "2024-08-02T22:32:09.443Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2023-51430 (GCVE-0-2023-51430)

    Vulnerability from cvelistv5 – Published: 2023-12-29 03:39 – Updated: 2024-11-27 15:25
    VLAI
    Summary
    Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak.
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator (v2.0.3)
    Assigner
    Impacted products
    Vendor Product Version
    Honor Magic UI Affected: 6.0 , < 6.1.0.212 (custom)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-02T22:32:09.427Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://www.hihonor.com/global/security/cve-2023-51430/"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2023-51430",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2024-01-11T20:40:51.313330Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2024-11-27T15:25:26.247Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "Magic UI",
              "vendor": "Honor",
              "versions": [
                {
                  "lessThan": "6.1.0.212",
                  "status": "affected",
                  "version": "6.0",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\n\n\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eSome Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak.\u003c/span\u003e\u003cbr\u003e\n\n"
                }
              ],
              "value": "\nSome Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak.\n\n\n"
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "NONE",
                "baseScore": 4.4,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "NONE",
                "privilegesRequired": "HIGH",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2023-12-29T03:39:19.062Z",
            "orgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4",
            "shortName": "Honor"
          },
          "references": [
            {
              "url": "https://www.hihonor.com/global/security/cve-2023-51430/"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "x_generator": {
            "engine": "Vulnogram 0.1.0-dev"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4",
        "assignerShortName": "Honor",
        "cveId": "CVE-2023-51430",
        "datePublished": "2023-12-29T03:39:19.062Z",
        "dateReserved": "2023-12-19T01:27:50.841Z",
        "dateUpdated": "2024-11-27T15:25:26.247Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2023-51429 (GCVE-0-2023-51429)

    Vulnerability from cvelistv5 – Published: 2023-12-29 03:36 – Updated: 2024-09-09 17:42
    VLAI
    Summary
    Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak.
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-269 - Improper Privilege Management
    Assigner
    Impacted products
    Vendor Product Version
    Honor Magic OS Affected: 7.0 , < 7.0.0.156 (custom)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-02T22:32:09.454Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://www.hihonor.com/global/security/cve-2023-51429/"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2023-51429",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2024-09-09T17:41:47.514180Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-269",
                    "description": "CWE-269 Improper Privilege Management",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2024-09-09T17:42:09.270Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "Magic OS",
              "vendor": "Honor",
              "versions": [
                {
                  "lessThan": "7.0.0.156",
                  "status": "affected",
                  "version": "7.0",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\n\n\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eSome Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak.\u003c/span\u003e\n\n"
                }
              ],
              "value": "\nSome Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak.\n\n"
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "NONE",
                "baseScore": 6,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "NONE",
                "privilegesRequired": "HIGH",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2023-12-29T03:36:16.905Z",
            "orgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4",
            "shortName": "Honor"
          },
          "references": [
            {
              "url": "https://www.hihonor.com/global/security/cve-2023-51429/"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "x_generator": {
            "engine": "Vulnogram 0.1.0-dev"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4",
        "assignerShortName": "Honor",
        "cveId": "CVE-2023-51429",
        "datePublished": "2023-12-29T03:36:16.905Z",
        "dateReserved": "2023-12-19T01:27:50.841Z",
        "dateUpdated": "2024-09-09T17:42:09.270Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2023-51428 (GCVE-0-2023-51428)

    Vulnerability from cvelistv5 – Published: 2023-12-29 03:32 – Updated: 2024-08-02 22:32
    VLAI
    Summary
    Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.
    CWE
    • CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')
    Assigner
    Impacted products
    Vendor Product Version
    Honor Magic OS Affected: 7.0 , < 7.0.0.129 (custom)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-02T22:32:09.425Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://www.hihonor.com/global/security/cve-2023-51428/"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "Magic OS",
              "vendor": "Honor",
              "versions": [
                {
                  "lessThan": "7.0.0.129",
                  "status": "affected",
                  "version": "7.0",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\n\n\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eSome Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.\u003c/span\u003e\n\n"
                }
              ],
              "value": "\nSome Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.\n\n"
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "LOW",
                "baseScore": 4.6,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "LOW",
                "privilegesRequired": "HIGH",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:L",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-843",
                  "description": "CWE-843 Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2023-12-29T03:32:31.596Z",
            "orgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4",
            "shortName": "Honor"
          },
          "references": [
            {
              "url": "https://www.hihonor.com/global/security/cve-2023-51428/"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "x_generator": {
            "engine": "Vulnogram 0.1.0-dev"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4",
        "assignerShortName": "Honor",
        "cveId": "CVE-2023-51428",
        "datePublished": "2023-12-29T03:32:31.596Z",
        "dateReserved": "2023-12-19T01:27:50.841Z",
        "dateUpdated": "2024-08-02T22:32:09.425Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2023-51427 (GCVE-0-2023-51427)

    Vulnerability from cvelistv5 – Published: 2023-12-29 03:30 – Updated: 2024-08-02 22:32
    VLAI
    Summary
    Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.
    CWE
    • CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')
    Assigner
    Impacted products
    Vendor Product Version
    Honor Magic OS Affected: 7.0 , < 7.0.0.129 (custom)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-02T22:32:09.957Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://www.hihonor.com/global/security/cve-2023-51427/"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "Magic OS",
              "vendor": "Honor",
              "versions": [
                {
                  "lessThan": "7.0.0.129",
                  "status": "affected",
                  "version": "7.0",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\n\n\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eSome Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.\u003c/span\u003e\u003cbr\u003e\n\n"
                }
              ],
              "value": "\nSome Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.\n\n\n"
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "LOW",
                "baseScore": 4.6,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "LOW",
                "privilegesRequired": "HIGH",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:L",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-843",
                  "description": "CWE-843 Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2023-12-29T03:30:31.955Z",
            "orgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4",
            "shortName": "Honor"
          },
          "references": [
            {
              "url": "https://www.hihonor.com/global/security/cve-2023-51427/"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "x_generator": {
            "engine": "Vulnogram 0.1.0-dev"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4",
        "assignerShortName": "Honor",
        "cveId": "CVE-2023-51427",
        "datePublished": "2023-12-29T03:30:31.955Z",
        "dateReserved": "2023-12-19T01:27:50.841Z",
        "dateUpdated": "2024-08-02T22:32:09.957Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2023-51426 (GCVE-0-2023-51426)

    Vulnerability from cvelistv5 – Published: 2023-12-29 03:28 – Updated: 2024-08-02 22:32
    VLAI
    Summary
    Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.
    CWE
    • CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')
    Assigner
    Impacted products
    Vendor Product Version
    Honor Magic OS Affected: 7.0 , < 7.0.0.129 (custom)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-02T22:32:09.501Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://www.hihonor.com/global/security/cve-2023-51426/"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "Magic OS",
              "vendor": "Honor",
              "versions": [
                {
                  "lessThan": "7.0.0.129",
                  "status": "affected",
                  "version": "7.0",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\n\n\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eSome Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.\u003c/span\u003e\n\n"
                }
              ],
              "value": "\nSome Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.\n\n"
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "LOW",
                "baseScore": 4.6,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "LOW",
                "privilegesRequired": "HIGH",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:L",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-843",
                  "description": "CWE-843 Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2023-12-29T03:28:07.173Z",
            "orgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4",
            "shortName": "Honor"
          },
          "references": [
            {
              "url": "https://www.hihonor.com/global/security/cve-2023-51426/"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "x_generator": {
            "engine": "Vulnogram 0.1.0-dev"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4",
        "assignerShortName": "Honor",
        "cveId": "CVE-2023-51426",
        "datePublished": "2023-12-29T03:28:07.173Z",
        "dateReserved": "2023-12-19T01:27:50.841Z",
        "dateUpdated": "2024-08-02T22:32:09.501Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2023-6939 (GCVE-0-2023-6939)

    Vulnerability from cvelistv5 – Published: 2023-12-29 03:23 – Updated: 2024-08-02 08:42
    VLAI
    Summary
    Some Honor products are affected by type confusion vulnerability, successful exploitation could cause denial of service.
    Assigner
    Impacted products
    Vendor Product Version
    Honor Magic UI Affected: 6.0 , < 6.0.0.217 (custom)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-02T08:42:08.569Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://www.hihonor.com/global/security/cve-2023-6939/"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "Magic UI",
              "vendor": "Honor",
              "versions": [
                {
                  "lessThan": "6.0.0.217",
                  "status": "affected",
                  "version": "6.0",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\n\n\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eSome Honor products are affected by type confusion vulnerability, successful exploitation could cause denial of service.\u003c/span\u003e"
                }
              ],
              "value": "\nSome Honor products are affected by type confusion vulnerability, successful exploitation could cause denial of service."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "LOW",
                "baseScore": 4,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2023-12-29T03:23:59.852Z",
            "orgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4",
            "shortName": "Honor"
          },
          "references": [
            {
              "url": "https://www.hihonor.com/global/security/cve-2023-6939/"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "x_generator": {
            "engine": "Vulnogram 0.1.0-dev"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4",
        "assignerShortName": "Honor",
        "cveId": "CVE-2023-6939",
        "datePublished": "2023-12-29T03:23:59.852Z",
        "dateReserved": "2023-12-19T01:27:23.630Z",
        "dateUpdated": "2024-08-02T08:42:08.569Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2023-23443 (GCVE-0-2023-23443)

    Vulnerability from cvelistv5 – Published: 2023-12-29 03:18 – Updated: 2025-04-17 20:22
    VLAI
    Summary
    Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')
    Assigner
    Impacted products
    Vendor Product Version
    Honor Magic OS Affected: 7.0 , < 7.0.0.156 (custom)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-02T10:28:40.965Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://www.hihonor.com/global/security/cve-2023-23443/"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2023-23443",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2024-01-03T16:36:46.242916Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-843",
                    "description": "CWE-843 Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2025-04-17T20:22:45.720Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "Magic OS",
              "vendor": "Honor",
              "versions": [
                {
                  "lessThan": "7.0.0.156",
                  "status": "affected",
                  "version": "7.0",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\n\n\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eSome Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.\u003c/span\u003e\n\n"
                }
              ],
              "value": "\nSome Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.\n\n"
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "LOW",
                "baseScore": 4.6,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "LOW",
                "privilegesRequired": "HIGH",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:L",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2023-12-29T03:18:41.853Z",
            "orgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4",
            "shortName": "Honor"
          },
          "references": [
            {
              "url": "https://www.hihonor.com/global/security/cve-2023-23443/"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "x_generator": {
            "engine": "Vulnogram 0.1.0-dev"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4",
        "assignerShortName": "Honor",
        "cveId": "CVE-2023-23443",
        "datePublished": "2023-12-29T03:18:41.853Z",
        "dateReserved": "2023-01-12T04:00:30.137Z",
        "dateUpdated": "2025-04-17T20:22:45.720Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2023-23442 (GCVE-0-2023-23442)

    Vulnerability from cvelistv5 – Published: 2023-12-29 03:15 – Updated: 2024-08-02 10:28
    VLAI
    Summary
    Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.
    Assigner
    Impacted products
    Vendor Product Version
    Honor Magic OS Affected: 7.0.0.106 , < 7.0.0.158 (custom)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-02T10:28:40.947Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://www.hihonor.com/global/security/cve-2023-23442/"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "Magic OS",
              "vendor": "Honor",
              "versions": [
                {
                  "lessThan": "7.0.0.158",
                  "status": "affected",
                  "version": "7.0.0.106",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\n\n\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eSome Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.\u003c/span\u003e\n\n"
                }
              ],
              "value": "\nSome Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.\n\n"
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "LOW",
                "baseScore": 4.6,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "LOW",
                "privilegesRequired": "HIGH",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:L",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2023-12-29T03:15:52.271Z",
            "orgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4",
            "shortName": "Honor"
          },
          "references": [
            {
              "url": "https://www.hihonor.com/global/security/cve-2023-23442/"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "x_generator": {
            "engine": "Vulnogram 0.1.0-dev"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4",
        "assignerShortName": "Honor",
        "cveId": "CVE-2023-23442",
        "datePublished": "2023-12-29T03:15:52.271Z",
        "dateReserved": "2023-01-12T04:00:30.136Z",
        "dateUpdated": "2024-08-02T10:28:40.947Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2023-23441 (GCVE-0-2023-23441)

    Vulnerability from cvelistv5 – Published: 2023-12-29 03:11 – Updated: 2024-08-02 10:28
    VLAI
    Summary
    Some Honor products are affected by out of bounds read vulnerability, successful exploitation could cause information leak.
    Assigner
    Impacted products
    Vendor Product Version
    Honor Magic UI Affected: 6.0 , < 6.1.0.500 (custom)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-02T10:28:40.921Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://www.hihonor.com/global/security/cve-2023-23441/"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "Magic UI",
              "vendor": "Honor",
              "versions": [
                {
                  "lessThan": "6.1.0.500",
                  "status": "affected",
                  "version": "6.0",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\n\n\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eSome Honor products are affected by out of bounds read vulnerability, successful exploitation could cause information leak.\u003c/span\u003e\n\n"
                }
              ],
              "value": "\nSome Honor products are affected by out of bounds read vulnerability, successful exploitation could cause information leak.\n\n"
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "NONE",
                "baseScore": 6,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "NONE",
                "privilegesRequired": "HIGH",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2023-12-29T03:11:48.552Z",
            "orgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4",
            "shortName": "Honor"
          },
          "references": [
            {
              "url": "https://www.hihonor.com/global/security/cve-2023-23441/"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "x_generator": {
            "engine": "Vulnogram 0.1.0-dev"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4",
        "assignerShortName": "Honor",
        "cveId": "CVE-2023-23441",
        "datePublished": "2023-12-29T03:11:48.552Z",
        "dateReserved": "2023-01-12T04:00:30.136Z",
        "dateUpdated": "2024-08-02T10:28:40.921Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2023-23430 (GCVE-0-2023-23430)

    Vulnerability from cvelistv5 – Published: 2023-12-29 03:09 – Updated: 2025-04-17 20:23
    VLAI
    Summary
    Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions.
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-269 - Improper Privilege Management
    Assigner
    Impacted products
    Vendor Product Version
    Honor com.hihonor.magichome Affected: 7.3.2.306 , < 7.60.10.303 (custom)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-02T10:28:40.914Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://www.hihonor.com/global/security/cve-2023-23430/"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2023-23430",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2024-01-03T16:38:57.474894Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2025-04-17T20:23:15.293Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "com.hihonor.magichome\t",
              "vendor": "Honor",
              "versions": [
                {
                  "lessThan": "7.60.10.303",
                  "status": "affected",
                  "version": "7.3.2.306",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\n\n\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eSome Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions.\u003c/span\u003e"
                }
              ],
              "value": "\nSome Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "LOW",
                "baseScore": 3.3,
                "baseSeverity": "LOW",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "REQUIRED",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-269",
                  "description": "CWE-269 Improper Privilege Management",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2023-12-29T03:09:10.957Z",
            "orgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4",
            "shortName": "Honor"
          },
          "references": [
            {
              "url": "https://www.hihonor.com/global/security/cve-2023-23430/"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "x_generator": {
            "engine": "Vulnogram 0.1.0-dev"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4",
        "assignerShortName": "Honor",
        "cveId": "CVE-2023-23430",
        "datePublished": "2023-12-29T03:09:10.957Z",
        "dateReserved": "2023-01-12T04:00:30.135Z",
        "dateUpdated": "2025-04-17T20:23:15.293Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2023-51435 (GCVE-0-2023-51435)

    Vulnerability from nvd – Published: 2023-12-29 03:51 – Updated: 2025-04-17 20:21
    VLAI
    Summary
    Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak.
    SSVC
    Exploitation: none Automatable: yes Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-269 - Improper Privilege Management
    Assigner
    Impacted products
    Vendor Product Version
    Honor Magic UI Affected: 6.0 , < 6.1.0.212 (custom)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-02T22:32:09.383Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://www.hihonor.com/global/security/cve-2023-51435/"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2023-51435",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "yes"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2024-01-03T16:38:06.303616Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-269",
                    "description": "CWE-269 Improper Privilege Management",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2025-04-17T20:21:51.799Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "Magic UI",
              "vendor": "Honor",
              "versions": [
                {
                  "lessThan": "6.1.0.212",
                  "status": "affected",
                  "version": "6.0",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\n\n\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eSome Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak.\u003c/span\u003e\n\n"
                }
              ],
              "value": "\nSome Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak.\n\n"
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "NONE",
                "baseScore": 7.1,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2023-12-29T03:51:46.940Z",
            "orgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4",
            "shortName": "Honor"
          },
          "references": [
            {
              "url": "https://www.hihonor.com/global/security/cve-2023-51435/"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "x_generator": {
            "engine": "Vulnogram 0.1.0-dev"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4",
        "assignerShortName": "Honor",
        "cveId": "CVE-2023-51435",
        "datePublished": "2023-12-29T03:51:46.940Z",
        "dateReserved": "2023-12-19T01:27:50.842Z",
        "dateUpdated": "2025-04-17T20:21:51.799Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2023-51434 (GCVE-0-2023-51434)

    Vulnerability from nvd – Published: 2023-12-29 03:49 – Updated: 2024-08-02 22:32
    VLAI
    Summary
    Some Honor products are affected by buffer overflow vulnerability, successful exploitation could cause code execution.
    Assigner
    Impacted products
    Vendor Product Version
    Honor Magic UI Affected: 6.0 , < 6.1.0.212 (custom)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-02T22:32:09.460Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://www.hihonor.com/global/security/cve-2023-51434/"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "Magic UI",
              "vendor": "Honor",
              "versions": [
                {
                  "lessThan": "6.1.0.212",
                  "status": "affected",
                  "version": "6.0",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\n\n\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eSome Honor products are affected by buffer overflow vulnerability, successful exploitation could cause code execution.\u003c/span\u003e\n\n"
                }
              ],
              "value": "\nSome Honor products are affected by buffer overflow vulnerability, successful exploitation could cause code execution.\n\n"
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 9.3,
                "baseSeverity": "CRITICAL",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "NONE",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2023-12-29T03:49:46.394Z",
            "orgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4",
            "shortName": "Honor"
          },
          "references": [
            {
              "url": "https://www.hihonor.com/global/security/cve-2023-51434/"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "x_generator": {
            "engine": "Vulnogram 0.1.0-dev"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4",
        "assignerShortName": "Honor",
        "cveId": "CVE-2023-51434",
        "datePublished": "2023-12-29T03:49:46.394Z",
        "dateReserved": "2023-12-19T01:27:50.842Z",
        "dateUpdated": "2024-08-02T22:32:09.460Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2023-51433 (GCVE-0-2023-51433)

    Vulnerability from nvd – Published: 2023-12-29 03:47 – Updated: 2024-08-02 22:32
    VLAI
    Summary
    Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak.
    Assigner
    Impacted products
    Vendor Product Version
    Honor Magic UI Affected: 6.0 , < 6.1.0.212 (custom)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-02T22:32:09.415Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://www.hihonor.com/global/security/cve-2023-51433/"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "Magic UI",
              "vendor": "Honor",
              "versions": [
                {
                  "lessThan": "6.1.0.212",
                  "status": "affected",
                  "version": "6.0",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\n\n\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eSome Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak.\u003c/span\u003e\n\n"
                }
              ],
              "value": "\nSome Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak.\n\n"
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "HIGH",
                "attackVector": "LOCAL",
                "availabilityImpact": "NONE",
                "baseScore": 2.9,
                "baseSeverity": "LOW",
                "confidentialityImpact": "LOW",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2023-12-29T03:47:34.013Z",
            "orgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4",
            "shortName": "Honor"
          },
          "references": [
            {
              "url": "https://www.hihonor.com/global/security/cve-2023-51433/"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "x_generator": {
            "engine": "Vulnogram 0.1.0-dev"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4",
        "assignerShortName": "Honor",
        "cveId": "CVE-2023-51433",
        "datePublished": "2023-12-29T03:47:34.013Z",
        "dateReserved": "2023-12-19T01:27:50.842Z",
        "dateUpdated": "2024-08-02T22:32:09.415Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2023-51432 (GCVE-0-2023-51432)

    Vulnerability from nvd – Published: 2023-12-29 03:45 – Updated: 2024-08-02 22:32
    VLAI
    Summary
    Some Honor products are affected by out of bounds read vulnerability, successful exploitation could cause information leak.
    Assigner
    Impacted products
    Vendor Product Version
    Honor Magic UI Affected: 6.0 , < 6.1.0.212 (custom)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-02T22:32:09.424Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://www.hihonor.com/global/security/cve-2023-51432/"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "Magic UI",
              "vendor": "Honor",
              "versions": [
                {
                  "lessThan": "6.1.0.212",
                  "status": "affected",
                  "version": "6.0",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\n\n\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eSome Honor products are affected by out of bounds read vulnerability, successful exploitation could cause information leak.\u003c/span\u003e\n\n"
                }
              ],
              "value": "\nSome Honor products are affected by out of bounds read vulnerability, successful exploitation could cause information leak.\n\n"
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "NONE",
                "baseScore": 3.2,
                "baseSeverity": "LOW",
                "confidentialityImpact": "LOW",
                "integrityImpact": "NONE",
                "privilegesRequired": "HIGH",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2023-12-29T03:45:42.193Z",
            "orgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4",
            "shortName": "Honor"
          },
          "references": [
            {
              "url": "https://www.hihonor.com/global/security/cve-2023-51432/"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "x_generator": {
            "engine": "Vulnogram 0.1.0-dev"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4",
        "assignerShortName": "Honor",
        "cveId": "CVE-2023-51432",
        "datePublished": "2023-12-29T03:45:42.193Z",
        "dateReserved": "2023-12-19T01:27:50.842Z",
        "dateUpdated": "2024-08-02T22:32:09.424Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2023-51431 (GCVE-0-2023-51431)

    Vulnerability from nvd – Published: 2023-12-29 03:43 – Updated: 2024-08-02 22:32
    VLAI
    Summary
    Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions.
    Assigner
    Impacted products
    Vendor Product Version
    Honor com.hihonor.phoneservice Affected: 11.0.0.241 , < 11.0.0.243 (custom)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-02T22:32:09.443Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://www.hihonor.com/global/security/cve-2023-51431/"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "com.hihonor.phoneservice\t",
              "vendor": "Honor",
              "versions": [
                {
                  "lessThan": "11.0.0.243",
                  "status": "affected",
                  "version": "11.0.0.241",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\n\n\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eSome Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions.\u003c/span\u003e\n\n"
                }
              ],
              "value": "\nSome Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions.\n\n"
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "HIGH",
                "attackVector": "LOCAL",
                "availabilityImpact": "HIGH",
                "baseScore": 7,
                "baseSeverity": "HIGH",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "HIGH",
                "privilegesRequired": "LOW",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2023-12-29T03:43:09.979Z",
            "orgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4",
            "shortName": "Honor"
          },
          "references": [
            {
              "url": "https://www.hihonor.com/global/security/cve-2023-51431/"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "x_generator": {
            "engine": "Vulnogram 0.1.0-dev"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4",
        "assignerShortName": "Honor",
        "cveId": "CVE-2023-51431",
        "datePublished": "2023-12-29T03:43:09.979Z",
        "dateReserved": "2023-12-19T01:27:50.841Z",
        "dateUpdated": "2024-08-02T22:32:09.443Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2023-51430 (GCVE-0-2023-51430)

    Vulnerability from nvd – Published: 2023-12-29 03:39 – Updated: 2024-11-27 15:25
    VLAI
    Summary
    Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak.
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator (v2.0.3)
    Assigner
    Impacted products
    Vendor Product Version
    Honor Magic UI Affected: 6.0 , < 6.1.0.212 (custom)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-02T22:32:09.427Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://www.hihonor.com/global/security/cve-2023-51430/"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2023-51430",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2024-01-11T20:40:51.313330Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2024-11-27T15:25:26.247Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "Magic UI",
              "vendor": "Honor",
              "versions": [
                {
                  "lessThan": "6.1.0.212",
                  "status": "affected",
                  "version": "6.0",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\n\n\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eSome Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak.\u003c/span\u003e\u003cbr\u003e\n\n"
                }
              ],
              "value": "\nSome Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak.\n\n\n"
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "NONE",
                "baseScore": 4.4,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "NONE",
                "privilegesRequired": "HIGH",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2023-12-29T03:39:19.062Z",
            "orgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4",
            "shortName": "Honor"
          },
          "references": [
            {
              "url": "https://www.hihonor.com/global/security/cve-2023-51430/"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "x_generator": {
            "engine": "Vulnogram 0.1.0-dev"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4",
        "assignerShortName": "Honor",
        "cveId": "CVE-2023-51430",
        "datePublished": "2023-12-29T03:39:19.062Z",
        "dateReserved": "2023-12-19T01:27:50.841Z",
        "dateUpdated": "2024-11-27T15:25:26.247Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2023-51429 (GCVE-0-2023-51429)

    Vulnerability from nvd – Published: 2023-12-29 03:36 – Updated: 2024-09-09 17:42
    VLAI
    Summary
    Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak.
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-269 - Improper Privilege Management
    Assigner
    Impacted products
    Vendor Product Version
    Honor Magic OS Affected: 7.0 , < 7.0.0.156 (custom)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-02T22:32:09.454Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://www.hihonor.com/global/security/cve-2023-51429/"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2023-51429",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2024-09-09T17:41:47.514180Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-269",
                    "description": "CWE-269 Improper Privilege Management",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2024-09-09T17:42:09.270Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "Magic OS",
              "vendor": "Honor",
              "versions": [
                {
                  "lessThan": "7.0.0.156",
                  "status": "affected",
                  "version": "7.0",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\n\n\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eSome Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak.\u003c/span\u003e\n\n"
                }
              ],
              "value": "\nSome Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak.\n\n"
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "NONE",
                "baseScore": 6,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "NONE",
                "privilegesRequired": "HIGH",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2023-12-29T03:36:16.905Z",
            "orgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4",
            "shortName": "Honor"
          },
          "references": [
            {
              "url": "https://www.hihonor.com/global/security/cve-2023-51429/"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "x_generator": {
            "engine": "Vulnogram 0.1.0-dev"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4",
        "assignerShortName": "Honor",
        "cveId": "CVE-2023-51429",
        "datePublished": "2023-12-29T03:36:16.905Z",
        "dateReserved": "2023-12-19T01:27:50.841Z",
        "dateUpdated": "2024-09-09T17:42:09.270Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2023-51428 (GCVE-0-2023-51428)

    Vulnerability from nvd – Published: 2023-12-29 03:32 – Updated: 2024-08-02 22:32
    VLAI
    Summary
    Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.
    CWE
    • CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')
    Assigner
    Impacted products
    Vendor Product Version
    Honor Magic OS Affected: 7.0 , < 7.0.0.129 (custom)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-02T22:32:09.425Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://www.hihonor.com/global/security/cve-2023-51428/"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "Magic OS",
              "vendor": "Honor",
              "versions": [
                {
                  "lessThan": "7.0.0.129",
                  "status": "affected",
                  "version": "7.0",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\n\n\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eSome Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.\u003c/span\u003e\n\n"
                }
              ],
              "value": "\nSome Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.\n\n"
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "LOW",
                "baseScore": 4.6,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "LOW",
                "privilegesRequired": "HIGH",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:L",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-843",
                  "description": "CWE-843 Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2023-12-29T03:32:31.596Z",
            "orgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4",
            "shortName": "Honor"
          },
          "references": [
            {
              "url": "https://www.hihonor.com/global/security/cve-2023-51428/"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "x_generator": {
            "engine": "Vulnogram 0.1.0-dev"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4",
        "assignerShortName": "Honor",
        "cveId": "CVE-2023-51428",
        "datePublished": "2023-12-29T03:32:31.596Z",
        "dateReserved": "2023-12-19T01:27:50.841Z",
        "dateUpdated": "2024-08-02T22:32:09.425Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2023-51427 (GCVE-0-2023-51427)

    Vulnerability from nvd – Published: 2023-12-29 03:30 – Updated: 2024-08-02 22:32
    VLAI
    Summary
    Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.
    CWE
    • CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')
    Assigner
    Impacted products
    Vendor Product Version
    Honor Magic OS Affected: 7.0 , < 7.0.0.129 (custom)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-02T22:32:09.957Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://www.hihonor.com/global/security/cve-2023-51427/"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "Magic OS",
              "vendor": "Honor",
              "versions": [
                {
                  "lessThan": "7.0.0.129",
                  "status": "affected",
                  "version": "7.0",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\n\n\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eSome Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.\u003c/span\u003e\u003cbr\u003e\n\n"
                }
              ],
              "value": "\nSome Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.\n\n\n"
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "LOW",
                "baseScore": 4.6,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "LOW",
                "privilegesRequired": "HIGH",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:L",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-843",
                  "description": "CWE-843 Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2023-12-29T03:30:31.955Z",
            "orgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4",
            "shortName": "Honor"
          },
          "references": [
            {
              "url": "https://www.hihonor.com/global/security/cve-2023-51427/"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "x_generator": {
            "engine": "Vulnogram 0.1.0-dev"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4",
        "assignerShortName": "Honor",
        "cveId": "CVE-2023-51427",
        "datePublished": "2023-12-29T03:30:31.955Z",
        "dateReserved": "2023-12-19T01:27:50.841Z",
        "dateUpdated": "2024-08-02T22:32:09.957Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2023-51426 (GCVE-0-2023-51426)

    Vulnerability from nvd – Published: 2023-12-29 03:28 – Updated: 2024-08-02 22:32
    VLAI
    Summary
    Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.
    CWE
    • CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')
    Assigner
    Impacted products
    Vendor Product Version
    Honor Magic OS Affected: 7.0 , < 7.0.0.129 (custom)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-02T22:32:09.501Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://www.hihonor.com/global/security/cve-2023-51426/"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "Magic OS",
              "vendor": "Honor",
              "versions": [
                {
                  "lessThan": "7.0.0.129",
                  "status": "affected",
                  "version": "7.0",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\n\n\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eSome Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.\u003c/span\u003e\n\n"
                }
              ],
              "value": "\nSome Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.\n\n"
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "LOW",
                "baseScore": 4.6,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "LOW",
                "privilegesRequired": "HIGH",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:L",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-843",
                  "description": "CWE-843 Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2023-12-29T03:28:07.173Z",
            "orgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4",
            "shortName": "Honor"
          },
          "references": [
            {
              "url": "https://www.hihonor.com/global/security/cve-2023-51426/"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "x_generator": {
            "engine": "Vulnogram 0.1.0-dev"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4",
        "assignerShortName": "Honor",
        "cveId": "CVE-2023-51426",
        "datePublished": "2023-12-29T03:28:07.173Z",
        "dateReserved": "2023-12-19T01:27:50.841Z",
        "dateUpdated": "2024-08-02T22:32:09.501Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2023-6939 (GCVE-0-2023-6939)

    Vulnerability from nvd – Published: 2023-12-29 03:23 – Updated: 2024-08-02 08:42
    VLAI
    Summary
    Some Honor products are affected by type confusion vulnerability, successful exploitation could cause denial of service.
    Assigner
    Impacted products
    Vendor Product Version
    Honor Magic UI Affected: 6.0 , < 6.0.0.217 (custom)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-02T08:42:08.569Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://www.hihonor.com/global/security/cve-2023-6939/"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "Magic UI",
              "vendor": "Honor",
              "versions": [
                {
                  "lessThan": "6.0.0.217",
                  "status": "affected",
                  "version": "6.0",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\n\n\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eSome Honor products are affected by type confusion vulnerability, successful exploitation could cause denial of service.\u003c/span\u003e"
                }
              ],
              "value": "\nSome Honor products are affected by type confusion vulnerability, successful exploitation could cause denial of service."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "LOW",
                "baseScore": 4,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2023-12-29T03:23:59.852Z",
            "orgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4",
            "shortName": "Honor"
          },
          "references": [
            {
              "url": "https://www.hihonor.com/global/security/cve-2023-6939/"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "x_generator": {
            "engine": "Vulnogram 0.1.0-dev"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4",
        "assignerShortName": "Honor",
        "cveId": "CVE-2023-6939",
        "datePublished": "2023-12-29T03:23:59.852Z",
        "dateReserved": "2023-12-19T01:27:23.630Z",
        "dateUpdated": "2024-08-02T08:42:08.569Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2023-23443 (GCVE-0-2023-23443)

    Vulnerability from nvd – Published: 2023-12-29 03:18 – Updated: 2025-04-17 20:22
    VLAI
    Summary
    Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-843 - Access of Resource Using Incompatible Type ('Type Confusion')
    Assigner
    Impacted products
    Vendor Product Version
    Honor Magic OS Affected: 7.0 , < 7.0.0.156 (custom)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-02T10:28:40.965Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://www.hihonor.com/global/security/cve-2023-23443/"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2023-23443",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2024-01-03T16:36:46.242916Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "problemTypes": [
              {
                "descriptions": [
                  {
                    "cweId": "CWE-843",
                    "description": "CWE-843 Access of Resource Using Incompatible Type (\u0027Type Confusion\u0027)",
                    "lang": "en",
                    "type": "CWE"
                  }
                ]
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2025-04-17T20:22:45.720Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "Magic OS",
              "vendor": "Honor",
              "versions": [
                {
                  "lessThan": "7.0.0.156",
                  "status": "affected",
                  "version": "7.0",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\n\n\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eSome Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.\u003c/span\u003e\n\n"
                }
              ],
              "value": "\nSome Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.\n\n"
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "LOW",
                "baseScore": 4.6,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "LOW",
                "privilegesRequired": "HIGH",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:L",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2023-12-29T03:18:41.853Z",
            "orgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4",
            "shortName": "Honor"
          },
          "references": [
            {
              "url": "https://www.hihonor.com/global/security/cve-2023-23443/"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "x_generator": {
            "engine": "Vulnogram 0.1.0-dev"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4",
        "assignerShortName": "Honor",
        "cveId": "CVE-2023-23443",
        "datePublished": "2023-12-29T03:18:41.853Z",
        "dateReserved": "2023-01-12T04:00:30.137Z",
        "dateUpdated": "2025-04-17T20:22:45.720Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2023-23442 (GCVE-0-2023-23442)

    Vulnerability from nvd – Published: 2023-12-29 03:15 – Updated: 2024-08-02 10:28
    VLAI
    Summary
    Some Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.
    Assigner
    Impacted products
    Vendor Product Version
    Honor Magic OS Affected: 7.0.0.106 , < 7.0.0.158 (custom)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-02T10:28:40.947Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://www.hihonor.com/global/security/cve-2023-23442/"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "Magic OS",
              "vendor": "Honor",
              "versions": [
                {
                  "lessThan": "7.0.0.158",
                  "status": "affected",
                  "version": "7.0.0.106",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\n\n\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eSome Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.\u003c/span\u003e\n\n"
                }
              ],
              "value": "\nSome Honor products are affected by type confusion vulnerability, successful exploitation could cause information leak.\n\n"
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "LOW",
                "baseScore": 4.6,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "NONE",
                "integrityImpact": "LOW",
                "privilegesRequired": "HIGH",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:L",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2023-12-29T03:15:52.271Z",
            "orgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4",
            "shortName": "Honor"
          },
          "references": [
            {
              "url": "https://www.hihonor.com/global/security/cve-2023-23442/"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "x_generator": {
            "engine": "Vulnogram 0.1.0-dev"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4",
        "assignerShortName": "Honor",
        "cveId": "CVE-2023-23442",
        "datePublished": "2023-12-29T03:15:52.271Z",
        "dateReserved": "2023-01-12T04:00:30.136Z",
        "dateUpdated": "2024-08-02T10:28:40.947Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2023-23441 (GCVE-0-2023-23441)

    Vulnerability from nvd – Published: 2023-12-29 03:11 – Updated: 2024-08-02 10:28
    VLAI
    Summary
    Some Honor products are affected by out of bounds read vulnerability, successful exploitation could cause information leak.
    Assigner
    Impacted products
    Vendor Product Version
    Honor Magic UI Affected: 6.0 , < 6.1.0.500 (custom)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-02T10:28:40.921Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://www.hihonor.com/global/security/cve-2023-23441/"
              }
            ],
            "title": "CVE Program Container"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "Magic UI",
              "vendor": "Honor",
              "versions": [
                {
                  "lessThan": "6.1.0.500",
                  "status": "affected",
                  "version": "6.0",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\n\n\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eSome Honor products are affected by out of bounds read vulnerability, successful exploitation could cause information leak.\u003c/span\u003e\n\n"
                }
              ],
              "value": "\nSome Honor products are affected by out of bounds read vulnerability, successful exploitation could cause information leak.\n\n"
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "NONE",
                "baseScore": 6,
                "baseSeverity": "MEDIUM",
                "confidentialityImpact": "HIGH",
                "integrityImpact": "NONE",
                "privilegesRequired": "HIGH",
                "scope": "CHANGED",
                "userInteraction": "NONE",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2023-12-29T03:11:48.552Z",
            "orgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4",
            "shortName": "Honor"
          },
          "references": [
            {
              "url": "https://www.hihonor.com/global/security/cve-2023-23441/"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "x_generator": {
            "engine": "Vulnogram 0.1.0-dev"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4",
        "assignerShortName": "Honor",
        "cveId": "CVE-2023-23441",
        "datePublished": "2023-12-29T03:11:48.552Z",
        "dateReserved": "2023-01-12T04:00:30.136Z",
        "dateUpdated": "2024-08-02T10:28:40.921Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }

    CVE-2023-23430 (GCVE-0-2023-23430)

    Vulnerability from nvd – Published: 2023-12-29 03:09 – Updated: 2025-04-17 20:23
    VLAI
    Summary
    Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions.
    SSVC
    Exploitation: none Automatable: no Technical Impact: partial
    CISA Coordinator (v2.0.3)
    CWE
    • CWE-269 - Improper Privilege Management
    Assigner
    Impacted products
    Vendor Product Version
    Honor com.hihonor.magichome Affected: 7.3.2.306 , < 7.60.10.303 (custom)
    Create a notification for this product.
    Show details on NVD website

    {
      "containers": {
        "adp": [
          {
            "providerMetadata": {
              "dateUpdated": "2024-08-02T10:28:40.914Z",
              "orgId": "af854a3a-2127-422b-91ae-364da2661108",
              "shortName": "CVE"
            },
            "references": [
              {
                "tags": [
                  "x_transferred"
                ],
                "url": "https://www.hihonor.com/global/security/cve-2023-23430/"
              }
            ],
            "title": "CVE Program Container"
          },
          {
            "metrics": [
              {
                "other": {
                  "content": {
                    "id": "CVE-2023-23430",
                    "options": [
                      {
                        "Exploitation": "none"
                      },
                      {
                        "Automatable": "no"
                      },
                      {
                        "Technical Impact": "partial"
                      }
                    ],
                    "role": "CISA Coordinator",
                    "timestamp": "2024-01-03T16:38:57.474894Z",
                    "version": "2.0.3"
                  },
                  "type": "ssvc"
                }
              }
            ],
            "providerMetadata": {
              "dateUpdated": "2025-04-17T20:23:15.293Z",
              "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
              "shortName": "CISA-ADP"
            },
            "title": "CISA ADP Vulnrichment"
          }
        ],
        "cna": {
          "affected": [
            {
              "defaultStatus": "unaffected",
              "product": "com.hihonor.magichome\t",
              "vendor": "Honor",
              "versions": [
                {
                  "lessThan": "7.60.10.303",
                  "status": "affected",
                  "version": "7.3.2.306",
                  "versionType": "custom"
                }
              ]
            }
          ],
          "descriptions": [
            {
              "lang": "en",
              "supportingMedia": [
                {
                  "base64": false,
                  "type": "text/html",
                  "value": "\n\n\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eSome Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions.\u003c/span\u003e"
                }
              ],
              "value": "\nSome Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions."
            }
          ],
          "metrics": [
            {
              "cvssV3_1": {
                "attackComplexity": "LOW",
                "attackVector": "LOCAL",
                "availabilityImpact": "LOW",
                "baseScore": 3.3,
                "baseSeverity": "LOW",
                "confidentialityImpact": "NONE",
                "integrityImpact": "NONE",
                "privilegesRequired": "NONE",
                "scope": "UNCHANGED",
                "userInteraction": "REQUIRED",
                "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
                "version": "3.1"
              },
              "format": "CVSS",
              "scenarios": [
                {
                  "lang": "en",
                  "value": "GENERAL"
                }
              ]
            }
          ],
          "problemTypes": [
            {
              "descriptions": [
                {
                  "cweId": "CWE-269",
                  "description": "CWE-269 Improper Privilege Management",
                  "lang": "en",
                  "type": "CWE"
                }
              ]
            }
          ],
          "providerMetadata": {
            "dateUpdated": "2023-12-29T03:09:10.957Z",
            "orgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4",
            "shortName": "Honor"
          },
          "references": [
            {
              "url": "https://www.hihonor.com/global/security/cve-2023-23430/"
            }
          ],
          "source": {
            "discovery": "UNKNOWN"
          },
          "x_generator": {
            "engine": "Vulnogram 0.1.0-dev"
          }
        }
      },
      "cveMetadata": {
        "assignerOrgId": "3836d913-7555-4dd0-a509-f5667fdf5fe4",
        "assignerShortName": "Honor",
        "cveId": "CVE-2023-23430",
        "datePublished": "2023-12-29T03:09:10.957Z",
        "dateReserved": "2023-01-12T04:00:30.135Z",
        "dateUpdated": "2025-04-17T20:23:15.293Z",
        "state": "PUBLISHED"
      },
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }