critical9.8
CVE-2023-37242
Vulnerability of commands from the modem being intercepted in the atcmdserver module.
Impact
Vulnerability of commands from the modem being intercepted in the atcmdserver module. Attackers may exploit this vulnerability to rewrite the non-volatile random-access memory (NVRAM), or facilitate the exploitation of other vulnerabilities.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Huawei | Emui | Versions 12.0.0, 13.0.0 |
| Huawei | Harmonyos | Versions 2.0, 3.0.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://consumer.huawei.com/en/support/bulletin/2023/7/
- https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-0000001587168858
- https://consumer.huawei.com/en/support/bulletin/2023/7/
- https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-0000001587168858