CVE-2023-23435

4.0 MEDIUM

Published: December 29, 2023 Modified: January 27, 2026

Description

Some Honor products are affected by signature management vulnerability, successful exploitation could cause the forged system file overwrite the correct system file

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

CVSS v3.x Details

0.0 Low Medium High Critical 10.0

Vector String

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

https://www.hihonor.com/global/security/cve-2023-23435/

Source: 3836d913-7555-4dd0-a509-f5667fdf5fe4

Vendor Advisory

https://www.hihonor.com/global/security/cve-2023-23435/

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

2 reference(s) from NVD

Quick Stats

CVSS v3 Score

4.0 / 10.0

EPSS (Exploit Probability)

0.0%

7th percentile

Exploitation Status

Not in CISA KEV

Weaknesses (CWE)

CWE-347 CWE-347

Affected Vendors

honor

Related CVEs