Vulnerability Description
Command injection vulnerability in the distributed file system module. Successful exploitation of this vulnerability may cause variables in the sock structure to be modified.
CVSS Score
7.5
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Huawei | Emui | 12.0.0 |
| Huawei | Harmonyos | 2.0.0 |
Related Weaknesses (CWE)
References
- https://device.harmonyos.com/en/docs/security/update/security-bulletins-202309-0Vendor Advisory
- https://https://consumer.huawei.com/en/support/bulletin/2023/9/Broken LinkVendor Advisory
- https://device.harmonyos.com/en/docs/security/update/security-bulletins-202309-0Vendor Advisory
- https://https://consumer.huawei.com/en/support/bulletin/2023/9/Broken LinkVendor Advisory
FAQ
What is CVE-2023-41303?
CVE-2023-41303 is a vulnerability with a CVSS score of 7.5 (HIGH). Command injection vulnerability in the distributed file system module. Successful exploitation of this vulnerability may cause variables in the sock structure to be modified.
How severe is CVE-2023-41303?
CVE-2023-41303 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2023-41303?
Check the references section above for vendor advisories and patch information. Affected products include: Huawei Emui, Huawei Harmonyos.