First day on Intigriti: our agent harness found and proved a remote code execution bug, paid €3,000.

CVE-2023-44109

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Clone vulnerability in the huks ta module.Successful exploitation of this vulnerability may affect service confidentiality.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

Affected software

Vendor	Product	Versions
Huawei	HarmonyOS	4.0.0; 3.1.0; 3.0.0; 2.1.0; 2.0.1; 2.0.0
Huawei	EMUI	13.0.0; 12.0.1; 12.0.0

References

Timeline

Published: Oct 11, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-44119.8A vulnerability has been found in TOTOLINK EX1200L EN_V9.3.5u.6146_B20201023 and classified as critical. This vulnerability affects the func CVE-2023-441104.3Out-of-bounds access vulnerability in the audio module.Successful exploitation of this vulnerability may affect availability.CVE-2023-441117.5Vulnerability of brute-force attacks on the device authentication module.Successful exploitation of this vulnerability may affect service co CVE-2023-441127.5Out-of-bounds access vulnerability in the device authentication module. Successful exploitation of this vulnerability may affect confidentia CVE-2023-441137.5Vulnerability of missing permission verification for APIs in the Designed for Reliability (DFR) module. Successful exploitation of this vuln CVE-2023-441147.5Out-of-bounds array vulnerability in the dataipa module.Successful exploitation of this vulnerability may affect service confidentiality.CVE-2023-441157.5Vulnerability of improper permission control in the Booster module. Impact: Successful exploitation of this vulnerability may affect service CVE-2023-441169.8Vulnerability of access permissions not being strictly verified in the APPWidget module.Successful exploitation of this vulnerability may ca CVE-2023-441177.5Vulnerability of trust relationships being inaccurate in distributed scenarios. Successful exploitation of this vulnerability may affect ser CVE-2023-441189.1Vulnerability of undefined permissions in the MeeTime module.Successful exploitation of this vulnerability will affect availability and conf CVE-2023-441197.5Vulnerability of mutual exclusion management in the kernel module.Successful exploitation of this vulnerability will affect availability.CVE-2023-44129.8A vulnerability was found in TOTOLINK EX1200L EN_V9.3.5u.6146_B20201023 and classified as critical. This issue affects the function setWanCf

CVE-2023-44109: High severity, CVSS 7.5 | Vulnix