HIGH🇵🇱 Wersja polska

CVE-2023-6514

CVSS 8.8v3.1pub. 2023-12-06upd. 2024-11-21

The Bluetooth module of some Huawei Smart Screen products has an identity authentication bypass vulnerability. Successful exploitation of this vulnerability may allow attackers to access restricted functions.  Successful exploitation of this vulnerability may allow attackers to access restricted functions.

CVSS Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Huawei Ajmd 370s

    HW
    Huawei
    all versions

  • Huawei Ajmd 370s Firmware

    OS
    Huawei
    103.1.0.110\(sp12c00e2r1p2\)
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Auth Bypass
CWE
References

Related vulnerabilities

CVE-2019-0708CRITICAL9.8⚠ KEVPL ✓same vendor

BlueKeep — krytyczny RCE w Remote Desktop Services (RDP)

CVE-2026-34865CRITICAL10.0PL ✓same vendor

HarmonyOS: przepełnienie bufora sterty (heap buffer overflow) w module WEB

CVE-2026-28536CRITICAL9.6PL ✓same vendor

Pominięcie uwierzytelnienia w module autoryzacji urządzeń Huawei HarmonyOS

CVE-2025-64314CRITICAL9.3PL ✓same vendor

Błąd kontroli uprawnień w module zarządzania pamięcią Huawei HarmonyOS

CVE-2022-32203CRITICAL9.8PL ✓same vendor

Command injection w drukarkach Huawei CV81-WDM — eskalacja do najwyższych uprawnień