CVE-2023-7271 — Privilege escalation vulnerability in the NMS module

Back Back to CVE browser

MEDIUM

Privilege escalation vulnerability in the NMS module

Published Jul 25, 2024

5.5

MEDIUM

CVSS 3.1

EPSS 0.11%

Description

Privilege escalation vulnerability in the NMS module Impact: Successful exploitation of this vulnerability will affect availability.

Affected products

Vendor Huawei Product EMUI Default
unaffected
- Version
  12.0.0
  Status
  affected
  Constraints
  -
- Version
  13.0.0
  Status
  affected
  Constraints
  -
- Version
  14.0.0
  Status
  affected
  Constraints
  -
Vendor Huawei Product HarmonyOS Default
unaffected
- Version
  2.0.0
  Status
  affected
  Constraints
  -
- Version
  2.1.0
  Status
  affected
  Constraints
  -
- Version
  3.0.0
  Status
  affected
  Constraints
  -
- Version
  3.1.0
  Status
  affected
  Constraints
  -
- Version
  4.0.0
  Status
  affected
  Constraints
  -
- Version
  4.2.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Huawei

EMUI

unaffected

Version	Status	Constraints
12.0.0	affected	-
13.0.0	affected	-
14.0.0	affected	-

Huawei

HarmonyOS

unaffected

Version	Status	Constraints
2.0.0	affected	-
2.1.0	affected	-
3.0.0	affected	-
3.1.0	affected	-
4.0.0	affected	-
4.2.0	affected	-

Remediation

No remediation recorded yet.

Metrics

0.11% 0.00108

Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 3, 2026.

EPSS probability 0.00108

Score over time

2024–2026

EPSS v3
EPSS v4
EPSS v5

Percentile over time

EPSS v3
EPSS v4
EPSS v5

Table of values (5 key points)

Flat stretches are collapsed; showing up to 120 newest points.

Date	Score	Percentile	Model
Oct 3, 2026	0.11% (0.00108)	1.10th	v5 (v2026.06.15)
Jun 15, 2026	0.11% (0.00108)	1.45th	v5 (v2026.06.15)
Mar 17, 2025	0.02% (0.00016)	1.90th	v4 (v2025.03.14)
Dec 12, 2024	0.04% (0.00043)	10.81th	v3 (v2023.03.01)
Jul 26, 2024	0.04% (0.00043)	9.36th	v3 (v2023.03.01)

Weaknesses (1)

CWE-840

References (1)

https://consumer.huawei.com/en/support/bulletin/2024/7/
Vendor Advisory

Link	Providers	Tags
https://consumer.huawei.com/en/support/bulletin/2024/7/		Vendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner huawei

Published Jul 25, 2024

Updated Aug 2, 2024

Reserved Jul 8, 2024

Link CVE-2023-7271

CISA Vulnrichment

Updated Jul 25, 2024

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2023-7271

Red Hat

Severity n/a

Public date n/a

Links CVE-2023-7271