CVE-2023-37242

State: Published
Severity: Not scored
Published: Jul 6, 2023
Updated: Nov 19, 2024
Reserved: Jun 29, 2023

Description

Vulnerability of commands from the modem being intercepted in the atcmdserver module. Attackers may exploit this vulnerability to rewrite the non-volatile random-access memory (NVRAM), or facilitate the exploitation of other vulnerabilities.

Scores

The record has no CVSS score.

Weaknesses

CWE-639 Authorization Bypass Through User-Controlled Key

Affected Products

Product	Versions
HarmonyOSHuawei	3.0.0Affected 2.0.0Affected
EMUIHuawei	13.0.0Affected 12.0.0Affected

References

https://consumer.huawei.com/en/support/bulletin/2023/7/
https://device.harmonyos.com/en/docs/security/update/security-bulletins-202307-0000001587168858

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.