CVE-2023-23432: High severity hihonor nth-an00 vulnerability
Published Dec 29, 2023
·Updated
Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file.
Affected Software
2 affected components
All of the following
Hihonor Nth-an00 Firmware<7.0.0.157
Hihonor Nth-an00
Event History
Dec 29, 2023
CVE Published
01:20 AM
Data Sourced
01:20 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-23432?
CVE-2023-23432 is classified as a high-severity vulnerability due to its potential to allow the overwriting of system files.
2
How do I fix CVE-2023-23432?
To remediate CVE-2023-23432, users should update their affected Honor products’ firmware to a version higher than 7.0.0.157.
3
Which Honor products are affected by CVE-2023-23432?
CVE-2023-23432 specifically affects the Hihonor Nth-an00 firmware version up to 7.0.0.157.
4
What type of vulnerability is CVE-2023-23432?
CVE-2023-23432 is a signature management vulnerability allowing potential unauthorized file overwrite.
5
Can CVE-2023-23432 be exploited remotely?
Yes, CVE-2023-23432 can be exploited remotely if the attacker has the right conditions for the forged file injection.