CVE-2023-52362 - Vulnerability Details - OpenCVE

Permission management vulnerability in the lock screen module.Successful exploitation of this vulnerability may affect availability.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable yes

Technical Impact partial

Vendors	Products
Huawei	Emui Harmonyos

Configuration 1 [-]

OR	cpe:2.3:o:huawei:emui:13.0.0:::::::*
	cpe:2.3:o:huawei:harmonyos:3.0.0:::::::*
	cpe:2.3:o:huawei:harmonyos:3.1.0:::::::*
	cpe:2.3:o:huawei:harmonyos:4.0.0:::::::*

No data.

References

Link	Providers
https://consumer.huawei.com/en/support/bulletin/2024/2/
https://device.harmonyos.com/cn/docs/security/update/security-bulletins-202402-0000001834855405

History

Thu, 13 Mar 2025 15:15:00 +0000

Type	Values Removed	Values Added
CPEs		cpe:2.3:o:huawei:emui:13.0.0:::::::* cpe:2.3:o:huawei:harmonyos:3.0.0:::::::* cpe:2.3:o:huawei:harmonyos:3.1.0:::::::* cpe:2.3:o:huawei:harmonyos:4.0.0:::::::*

Mon, 28 Oct 2024 22:00:00 +0000

Type	Values Removed	Values Added
Weaknesses	CWE-284

Mon, 28 Oct 2024 21:15:00 +0000

Type	Values Removed	Values Added
First Time appeared		Huawei Huawei emui Huawei harmonyos
Weaknesses		CWE-276
CPEs		cpe:2.3:o:huawei:emui:::::::: cpe:2.3:o:huawei:harmonyos::::::::
Vendors & Products		Huawei Huawei emui Huawei harmonyos
Metrics		ssvc `{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Thu, 29 Aug 2024 21:00:00 +0000

Type	Values Removed	Values Added
Weaknesses		CWE-284
Metrics		cvssV3_1 `{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}`

MITRE

Status: PUBLISHED

Assigner: huawei

Published: 2024-02-18T03:00:55.155Z

Updated: 2024-10-28T20:16:12.047Z

Reserved: 2024-01-26T06:51:31.234Z

Link: CVE-2023-52362

Vulnrichment

Updated: 2024-08-02T22:55:41.496Z

NVD

Status : Analyzed

Published: 2024-02-18T03:15:08.770

Modified: 2025-03-13T14:48:14.840

Link: CVE-2023-52362

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-52362", "assignerOrgId": "25ac1063-e409-4190-8079-24548c77ea2e", "state": "PUBLISHED", "assignerShortName": "huawei", "dateReserved": "2024-01-26T06:51:31.234Z", "datePublished": "2024-02-18T03:00:55.155Z", "dateUpdated": "2024-10-28T20:16:12.047Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "HarmonyOS", "vendor": "Huawei", "versions": [{"status": "affected", "version": "4.0.0"}, {"status": "affected", "version": "3.1.0"}, {"status": "affected", "version": "3.0.0"}]}, {"defaultStatus": "unaffected", "product": "EMUI", "vendor": "Huawei", "versions": [{"status": "affected", "version": "13.0.0"}]}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Permission management vulnerability in the lock screen module.Successful exploitation of this vulnerability may affect availability."}], "value": "Permission management vulnerability in the lock screen module.Successful exploitation of this vulnerability may affect availability."}], "problemTypes": [{"descriptions": [{"description": "Permissions, Privileges, and Access Controls", "lang": "en"}]}], "providerMetadata": {"orgId": "25ac1063-e409-4190-8079-24548c77ea2e", "shortName": "huawei", "dateUpdated": "2024-02-18T03:00:55.155Z"}, "references": [{"url": "https://consumer.huawei.com/en/support/bulletin/2024/2/"}, {"url": "https://device.harmonyos.com/cn/docs/security/update/security-bulletins-202402-0000001834855405"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 0.1.0-dev"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T22:55:41.496Z"}, "title": "CVE Program Container", "references": [{"url": "https://consumer.huawei.com/en/support/bulletin/2024/2/", "tags": ["x_transferred"]}, {"url": "https://device.harmonyos.com/cn/docs/security/update/security-bulletins-202402-0000001834855405", "tags": ["x_transferred"]}]}, {"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-276", "lang": "en", "description": "CWE-276 Incorrect Default Permissions"}]}], "affected": [{"vendor": "huawei", "product": "harmonyos", "cpes": ["cpe:2.3:o:huawei:harmonyos:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "4.0.0", "status": "affected"}, {"version": "3.1.0", "status": "affected"}, {"version": "3.0.0", "status": "affected"}]}, {"vendor": "huawei", "product": "emui", "cpes": ["cpe:2.3:o:huawei:emui:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "13.0.0", "status": "affected"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2024-02-20T16:01:25.382152Z", "id": "CVE-2023-52362", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-28T20:16:12.047Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://consumer.huawei.com/en/support/bulletin/2024/2/", "tags": ["x_transferred"]}, {"url": "https://device.harmonyos.com/cn/docs/security/update/security-bulletins-202402-0000001834855405", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T22:55:41.496Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2023-52362", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2024-02-20T16:01:25.382152Z"}}}], "affected": [{"cpes": ["cpe:2.3:o:huawei:harmonyos:*:*:*:*:*:*:*:*"], "vendor": "huawei", "product": "harmonyos", "versions": [{"status": "affected", "version": "4.0.0"}, {"status": "affected", "version": "3.1.0"}, {"status": "affected", "version": "3.0.0"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:o:huawei:emui:*:*:*:*:*:*:*:*"], "vendor": "huawei", "product": "emui", "versions": [{"status": "affected", "version": "13.0.0"}], "defaultStatus": "unknown"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-276", "description": "CWE-276 Incorrect Default Permissions"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-29T15:21:05.713Z"}}], "cna": {"source": {"discovery": "UNKNOWN"}, "affected": [{"vendor": "Huawei", "product": "HarmonyOS", "versions": [{"status": "affected", "version": "4.0.0"}, {"status": "affected", "version": "3.1.0"}, {"status": "affected", "version": "3.0.0"}], "defaultStatus": "unaffected"}, {"vendor": "Huawei", "product": "EMUI", "versions": [{"status": "affected", "version": "13.0.0"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://consumer.huawei.com/en/support/bulletin/2024/2/"}, {"url": "https://device.harmonyos.com/cn/docs/security/update/security-bulletins-202402-0000001834855405"}], "x_generator": {"engine": "Vulnogram 0.1.0-dev"}, "descriptions": [{"lang": "en", "value": "Permission management vulnerability in the lock screen module.Successful exploitation of this vulnerability may affect availability.", "supportingMedia": [{"type": "text/html", "value": "Permission management vulnerability in the lock screen module.Successful exploitation of this vulnerability may affect availability.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "Permissions, Privileges, and Access Controls"}]}], "providerMetadata": {"orgId": "25ac1063-e409-4190-8079-24548c77ea2e", "shortName": "huawei", "dateUpdated": "2024-02-18T03:00:55.155Z"}}}, "cveMetadata": {"cveId": "CVE-2023-52362", "state": "PUBLISHED", "dateUpdated": "2024-10-28T20:16:12.047Z", "dateReserved": "2024-01-26T06:51:31.234Z", "assignerOrgId": "25ac1063-e409-4190-8079-24548c77ea2e", "datePublished": "2024-02-18T03:00:55.155Z", "assignerShortName": "huawei"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:huawei:emui:13.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "353AEAF2-AF46-4835-93E1-4F942D5E2810", "vulnerable": true}, {"criteria": "cpe:2.3:o:huawei:harmonyos:3.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "CB3751C1-7729-41D3-AE50-80B5AF601135", "vulnerable": true}, {"criteria": "cpe:2.3:o:huawei:harmonyos:3.1.0:*:*:*:*:*:*:*", "matchCriteriaId": "4D81C4EF-7CAF-4E60-91A4-8CF7B95B2B54", "vulnerable": true}, {"criteria": "cpe:2.3:o:huawei:harmonyos:4.0.0:*:*:*:*:*:*:*", "matchCriteriaId": "8198CDB2-4BC5-411A-8736-615A531FC545", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Permission management vulnerability in the lock screen module.Successful exploitation of this vulnerability may affect availability."}, {"lang": "es", "value": "Vulnerabilidad de gesti\u00f3n de permisos en el m\u00f3dulo de pantalla de bloqueo. La explotaci\u00f3n exitosa de esta vulnerabilidad puede afectar la disponibilidad."}], "id": "CVE-2023-52362", "lastModified": "2025-03-13T14:48:14.840", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "NONE", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2024-02-18T03:15:08.770", "references": [{"source": "psirt@huawei.com", "tags": ["Vendor Advisory"], "url": "https://consumer.huawei.com/en/support/bulletin/2024/2/"}, {"source": "psirt@huawei.com", "tags": ["Vendor Advisory"], "url": "https://device.harmonyos.com/cn/docs/security/update/security-bulletins-202402-0000001834855405"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://consumer.huawei.com/en/support/bulletin/2024/2/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://device.harmonyos.com/cn/docs/security/update/security-bulletins-202402-0000001834855405"}], "sourceIdentifier": "psirt@huawei.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-276"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}