CVE-2023-23429 describes an incorrect privilege assignment vulnerability affecting certain Honor products running MagicOS. This flaw, rated High severity with a CVSS score of 7.5, allows an unauthenticated attacker to remotely trigger device service exceptions. While no public exploits, Metasploit modules, or Nuclei templates are currently available, and there is minimal community discussion or media coverage, the vulnerability presents a significant denial-of-service risk.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 7.0.0.193CPE matchmatch criteria | cpe:2.3:o:honor:magicos:*:*:*:*:*:*:*:* | ||
>= 7.0, < 7.0.0.193CPE match | cpe:2.3:o:honor:magicos:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.