CVE-2023-44096
11.10.2023, 11:15
Vulnerability of brute-force attacks on the device authentication module.Successful exploitation of this vulnerability may affect service confidentiality.Enginsight
| Vendor | Product | Version |
|---|---|---|
| huawei | harmonyos | 2.0.0 |
| huawei | harmonyos | 2.0.1 |
| huawei | harmonyos | 2.1.0 |
| huawei | harmonyos | 3.0.0 |
| huawei | harmonyos | 3.1.0 |
| huawei | harmonyos | 4.0.0 |
| huawei | emui | 12.0 |
| huawei | emui | 12.0.1 |
| huawei | emui | 13.0.0 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-287 - Improper AuthenticationWhen an actor claims to have a given identity, the software does not prove or insufficiently proves that the claim is correct.
- CWE-307 - Improper Restriction of Excessive Authentication AttemptsThe product does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame, making it more susceptible to brute force attacks.
References