First day on Intigriti: our agent harness found and proved a remote code execution bug, paid €3,000.

CVE-2023-34155

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Vulnerability of unauthorized calling on HUAWEI phones and tablets.Successful exploitation of this vulnerability may affect availability.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Affected software

No affected versions have been published.

Timeline

Published: Jun 19, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-341565.3Vulnerability of services denied by early fingerprint APIs on HarmonyOS products.Successful exploitation of this vulnerability may cause ser CVE-2023-341576.5Vulnerability of HwWatchHealth being hijacked.Successful exploitation of this vulnerability may cause repeated pop-up windows of the app.CVE-2023-341585.3Vulnerability of spoofing trustlists of Huawei desktop.Successful exploitation of this vulnerability can cause third-party apps to hide app CVE-2023-341599.8Improper permission control vulnerability in the Notepad app.Successful exploitation of the vulnerability may lead to privilege escalation, CVE-2023-34167.2The tagDiv Opt-In Builder plugin is vulnerable to Blind SQL Injection via the 'subscriptionCouponId' parameter via the 'create_stripe_subscr CVE-2023-341605.3Vulnerability of spoofing trustlists of Huawei desktop.Successful exploitation of this vulnerability can cause third-party apps to hide app CVE-2023-341617.5nappropriate authorization vulnerability in the SettingsProvider module.Successful exploitation of this vulnerability may cause features to CVE-2023-341627.5Version update determination vulnerability in the user profile module.Successful exploitation of this vulnerability may cause repeated HMS C CVE-2023-341637.5Permission control vulnerability in the window management module.Successful exploitation of this vulnerability may cause features to perform CVE-2023-341647.5Vulnerability of incomplete input parameter verification in the communication framework module. Successful exploitation of this vulnerabilit CVE-2023-341655.3Unauthorized access vulnerability in the Save for later feature provided by AI Touch.Successful exploitation of this vulnerability may cause CVE-2023-341667.5Vulnerability of system restart triggered by abnormal callbacks passed to APIs.Successful exploitation of this vulnerability may cause the s