CVE-2023-44116: Critical severity harmonyos vulnerability

Published Oct 11, 2023

Updated

Vulnerability of access permissions not being strictly verified in the APPWidget module.Successful exploitation of this vulnerability may cause some apps to run without being authorized.

Affected Software

10 affected components

Huawei Harmonyos=2.0.0

Huawei Harmonyos=2.0.1

Huawei Harmonyos=2.1.0

Huawei Harmonyos=3.0.0

Huawei Harmonyos=3.1.0

Huawei Harmonyos=4.0.0

Huawei Emui=11.0.1

Huawei Emui=12.0.0

Huawei Emui=12.0.1

Huawei Emui=13.0.0

Event History

Oct 11, 2023

CVE Published

via MITRE·12:01 PM

Data Sourced

via MITRE·12:01 PM

DescriptionWeakness

Frequently Asked Questions

What is the vulnerability ID of this vulnerability?

The vulnerability ID is CVE-2023-44116.

What is the severity of CVE-2023-44116?

The severity of CVE-2023-44116 is critical with a score of 9.8.

Which software versions are affected by CVE-2023-44116?

Versions 2.0.0, 2.0.1, 2.1.0, 3.0.0, 3.1.0, and 4.0.0 of Huawei HarmonyOS, as well as versions 11.0.1, 12.0.0, 12.0.1, and 13.0.0 of Huawei Emui are affected by CVE-2023-44116.

What is the impact of exploiting CVE-2023-44116?

Exploiting CVE-2023-44116 may cause unauthorized apps to run on the affected device.

Where can I find more information about CVE-2023-44116?

You can find more information about CVE-2023-44116 in the Huawei support bulletin (https://consumer.huawei.com/en/support/bulletin/2023/10/) and the HarmonyOS security update documentation (https://device.harmonyos.com/en/docs/security/update/security-bulletins-202310-0000001663676540).