CVE-2023-44098

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Nov 8, 2023
Updated: Nov 14, 2023
CWE ID 311
CWE ID 200

Summary

CVE-2023-44098 is a newly identified vulnerability affecting the card management module. The issue stems from the lack of encryption, making sensitive data at risk. Successful exploitation may result in a breach of service confidentiality. An attacker could potentially gain unauthorized access to card information, leading to potential data theft or manipulation. Organizations using the affected module are urged to apply the necessary security patches to mitigate this vulnerability. Failure to do so may leave systems open to unintended data exposure.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • HarmonyOS
  • Huawei EMUI

Affected Vendors

  • Huawei Technologies