CVE-2023-52097: Infoleak

Published Feb 18, 2024

Updated

Vulnerability of foreground service restrictions being bypassed in the NMS module.Successful exploitation of this vulnerability may affect service confidentiality.

Affected Software

7 affected components

Huawei Emui=12.0.0

Huawei Emui=13.0.0

Huawei Harmonyos=2.0.0

Huawei Harmonyos=2.1.0

Huawei Harmonyos=3.0.0

Huawei Harmonyos=3.1.0

Huawei Harmonyos=4.0.0

Event History

Feb 18, 2024

CVE Published

via MITRE·02:54 AM

Data Sourced

via MITRE·02:54 AM

DescriptionWeakness

Data Sourced

via NVD·03:15 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2023-52097?

CVE-2023-52097 has been classified as a high severity vulnerability due to the potential impact on service confidentiality.

How do I fix CVE-2023-52097?

To fix CVE-2023-52097, users should update their devices to the latest version of Huawei EMUI or HarmonyOS provided by Huawei.

Which devices are affected by CVE-2023-52097?

CVE-2023-52097 affects devices running Huawei EMUI version 12.0.0 or 13.0.0, and HarmonyOS versions 2.0.0 to 4.0.0.

What type of vulnerability is CVE-2023-52097?

CVE-2023-52097 is a vulnerability related to the bypass of foreground service restrictions in the NMS module.

Can CVE-2023-52097 be exploited remotely?

Yes, successful exploitation of CVE-2023-52097 may allow unauthorized access to sensitive services, which could be conducted remotely.