2025-01-19 03:03:47 +00:00

60 lines
2.0 KiB
JSON

{
"id": "CVE-2023-7263",
"sourceIdentifier": "psirt@huawei.com",
"published": "2024-12-28T07:15:19.580",
"lastModified": "2024-12-28T07:15:19.580",
"vulnStatus": "Awaiting Analysis",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Some Huawei home music system products have a path traversal vulnerability. Successful exploitation of this vulnerability may cause unauthorized file deletion or file permission change.(Vulnerability ID:HWPSIRT-2023-53450)\n\nThis vulnerability has been assigned a (CVE)ID:CVE-2023-7263"
},
{
"lang": "es",
"value": "Algunos productos de sistemas de m\u00fasica para el hogar de Huawei tienen una vulnerabilidad de cruce de rutas. La explotaci\u00f3n exitosa de esta vulnerabilidad puede provocar la eliminaci\u00f3n no autorizada de archivos o el cambio de permisos de archivos. (ID de vulnerabilidad: HWPSIRT-2023-53450) A esta vulnerabilidad se le ha asignado un ID (CVE): CVE-2023-7263"
}
],
"metrics": {
"cvssMetricV31": [
{
"source": "psirt@huawei.com",
"type": "Secondary",
"cvssData": {
"version": "3.1",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H",
"baseScore": 7.3,
"baseSeverity": "HIGH",
"attackVector": "ADJACENT_NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "LOW",
"userInteraction": "NONE",
"scope": "UNCHANGED",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.1,
"impactScore": 5.2
}
]
},
"weaknesses": [
{
"source": "psirt@huawei.com",
"type": "Secondary",
"description": [
{
"lang": "en",
"value": "CWE-35"
}
]
}
],
"references": [
{
"url": "https://www.huawei.com/en/psirt/security-advisories/2024/huawei-sa-ptvihhms-20747ba3-en",
"source": "psirt@huawei.com"
}
]
}