CVSS: 7.5EPSS: 0%CPEs: 9EXPL: 0CVE-2023-39408
https://notcve.org/view.php?id=CVE-2023-39408
DoS vulnerability in the PMS module. Successful exploitation of this vulnerability may cause the system to restart. Vulnerabilidad DoS en el módulo PMS. La explotación exitosa de esta vulnerabilidad puede hacer que el sistema se reinicie. • https://consumer.huawei.com/en/support/bulletin/2023/9 https://device.harmonyos.com/en/docs/security/update/security-bulletins-202309-0000001638925158 • CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow') •
CVSS: 9.1EPSS: 0%CPEs: 1EXPL: 0CVE-2023-39407
https://notcve.org/view.php?id=CVE-2023-39407
The Watchkit has a risk of unauthorized file access.Successful exploitation of this vulnerability may affect confidentiality and integrity. Watchkit tiene el riesgo de acceso no autorizado a archivos. La explotación exitosa de esta vulnerabilidad puede afectar la confidencialidad y la integridad. • https://device.harmonyos.com/en/docs/security/update/security-bulletins-202309-0000001638925158 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 9.1EPSS: 0%CPEs: 2EXPL: 0CVE-2021-46895
https://notcve.org/view.php?id=CVE-2021-46895
Vulnerability of defects introduced in the design process in the Multi-Device Task Center. Successful exploitation of this vulnerability will cause the hopped app to bypass the app lock and reset the device that initiates the hop. • https://consumer.huawei.com/en/support/bulletin/2023/8 https://device.harmonyos.com/en/docs/security/update/security-bulletins-202308-0000001667644725 • CWE CATEGORY •
CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0CVE-2023-39406
https://notcve.org/view.php?id=CVE-2023-39406
Permission control vulnerability in the XLayout component. Successful exploitation of this vulnerability may cause apps to forcibly restart. • https://consumer.huawei.com/en/support/bulletin/2023/8 https://device.harmonyos.com/en/docs/security/update/security-bulletins-202308-0000001667644725 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 7.5EPSS: 0%CPEs: 3EXPL: 0CVE-2023-39404
https://notcve.org/view.php?id=CVE-2023-39404
Vulnerability of input parameter verification in certain APIs in the window management module. Successful exploitation of this vulnerability may cause the device to restart. • https://consumer.huawei.com/en/support/bulletin/2023/8 https://device.harmonyos.com/en/docs/security/update/security-bulletins-202308-0000001667644725 • CWE-20: Improper Input Validation •