CVE-2023-51433

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-269

Affected software

VendorProductVersions
HonorMagic UI>= 6.0, < 6.1.0.212

References

Timeline

Published
Dec 29, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-514347.8Some Honor products are affected by buffer overflow vulnerability, successful exploitation could cause code execution.CVE-2023-514357.1Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak.CVE-2023-514365.9Cross-site scripting vulnerability exists in UNIVERSAL PASSPORT RX versions 1.0.0 to 1.0.8, which may allow a remote authenticated attacker CVE-2023-514377.4Observable timing discrepancy vulnerability in Apache Pulsar SASL Authentication Provider can allow an attacker to forge a SASL Role Token tCVE-2023-514389.8A vulnerability has been identified in SIMATIC IPC1047E (All versions with maxView Storage Manager < V4.14.00.26068 on Windows), SIMATIC IPCCVE-2023-514397.8A vulnerability has been identified in JT2Go (All versions < V14.3.0.6), Teamcenter Visualization V13.3 (All versions < V13.3.0.13), TeamcenCVE-2023-51448.8** UNSUPPORTED WHEN ASSIGNED ** A vulnerability, which was classified as critical, was found in D-Link DAR-7000 and DAR-8000 up to 20151231.CVE-2023-514407.5A vulnerability has been identified in SIMATIC CP 343-1 (6GK7343-1EX30-0XE0) (All versions), SIMATIC CP 343-1 Lean (6GK7343-1CX10-0XE0) (AllCVE-2023-514417.2** UNSUPPORTED WHEN ASSIGNED ** Improper Input Validation vulnerability in Apache Axis allowed users with access to the admin service to perCVE-2023-514428.6Navidrome is an open source web-based music collection server and streamer. A security vulnerability has been identified in navidrome's subsCVE-2023-514435.9FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from proprietary telecom switches to a software implementCVE-2023-514447.2GeoServer is an open source software server written in Java that allows users to share and edit geospatial data. An arbitrary file upload vu