← Back

CVE-2023-41303

nvd nist
Published: Sep 25, 2023Modified: Nov 21, 2024

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

Command injection vulnerability in the distributed file system module. Successful exploitation of this vulnerability may cause variables in the sock structure to be modified.

Affected (8)

Products: Huawei: Emui, Harmonyos
Huawei
2 products
Emui
Harmonyos
Configuration A
8 vulnerable
Vulnerable SoftwareAffected Versions
Huawei
Emui
Version 12.0.0
Emui
Version 12.0.1
Emui
Version 13.0.0
Huawei
Harmonyos
Version 2.0.0
Harmonyos
Version 2.0.1
Harmonyos
Version 2.1.0
Harmonyos
Version 3.0.0
Harmonyos
Version 3.1.0

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
CWE-77
Improper Neutralization of Special Elements used in a Command ('Command Injection')
The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.

References (4)

Source: psirt@huawei.com
Vendor Advisory
Source: psirt@huawei.com
Broken LinkVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Broken LinkVendor Advisory

Timeline

No history available yet.