high7.5
CVE-2023-39392
Vulnerability of insecure signatures in the OsuLogin module.
Impact
Vulnerability of insecure signatures in the OsuLogin module. Successful exploitation of this vulnerability may cause OsuLogin to be maliciously modified and overwritten.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Huawei | Emui | Versions 12.0.1, 13.0.0 |
| Huawei | Harmonyos | Versions 2.0.1, 3.0.0, 3.1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://consumer.huawei.com/en/support/bulletin/2023/8/
- https://device.harmonyos.com/en/docs/security/update/security-bulletins-202308-0000001667644725
- https://consumer.huawei.com/en/support/bulletin/2023/8/
- https://device.harmonyos.com/en/docs/security/update/security-bulletins-202308-0000001667644725