CVE-2023-41295

CVSS 3.1 Score 5.3 of 10 (medium)

Details

Published Sep 25, 2023
Updated: Oct 26, 2023
CWE ID 732

Summary

CVE-2023-41295 is a newly identified vulnerability affecting the displayengine module. The issue lies in the improper permission management within this component, allowing unauthorized users to adjust the display brightness settings. Although the consequences may seem minor, successful exploitation of this vulnerability can result in the screen dimming, potentially impacting user experience and productivity. It is essential for affected systems to receive the necessary patch to mitigate this risk and maintain secure and optimal functionality.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • HarmonyOS
  • Huawei EMUI

Affected Vendors

  • Huawei Technologies