CVE-2023-0116

Summary

The reminder module lacks an authentication mechanism for broadcasts received. Successful exploitation of this vulnerability may affect availability.

Affected Software

VendorProductVersion RangeStatus
HuaweiHarmonyOS3.1.0affected
HuaweiHarmonyOS3.0.0affected
HuaweiHarmonyOS2.1.0affected
HuaweiHarmonyOS2.0.1affected
HuaweiHarmonyOS2.0.0affected
HuaweiEMUI13.0.0affected
HuaweiEMUI12.0.1affected
HuaweiEMUI12.0.0affected

Weaknesses

  • Weaknesses Introduced During Design

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: yes
    • Technical Impact: partial

References