CVE-2023-41296: Critical severity emui 5.0 vulnerability

Published Sep 25, 2023

Updated

Vulnerability of missing authorization in the kernel module. Successful exploitation of this vulnerability may affect integrity and confidentiality.

Affected Software

9 affected components

Huawei Emui=11.0.1

Huawei Emui=12.0

Huawei Emui=12.0.1

Huawei Emui=13.0.0

Huawei Harmonyos=2.0.0

Huawei Harmonyos=2.0.1

Huawei Harmonyos=3.0.0

Huawei Harmonyos=3.1.0

Huawei Harmonyos=4.0.0

Event History

Sep 25, 2023

CVE Published

via MITRE·11:37 AM

Data Sourced

via MITRE·11:37 AM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2023-41296?

CVE-2023-41296 is a vulnerability related to missing authorization in the kernel module that can be exploited to compromise integrity and confidentiality.

Which software versions are affected by CVE-2023-41296?

CVE-2023-41296 affects Huawei Emui versions 11.0.1, 12.0, 12.0.1, 13.0.0, and Huawei Harmonyos versions 2.0.0, 2.0.1, 3.0.0, 3.1.0, and 4.0.0.

What is the severity of CVE-2023-41296?

CVE-2023-41296 has a severity rating of 9.1, classified as critical.

How can CVE-2023-41296 be exploited?

CVE-2023-41296 can be exploited by attackers to compromise the integrity and confidentiality of affected systems.

How can I fix the vulnerability CVE-2023-41296?

To fix CVE-2023-41296, it is recommended to apply the security updates provided by Huawei for the affected software versions.