CVE-2023-32890

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

In modem EMM, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY01183647; Issue ID: MOLY01183647 (MSV-963).

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published: Jan 2, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-328916.7In bluetooth service, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privi CVE-2023-32905.0A BOLA vulnerability in POST /customers allows a low privileged user to create a low privileged user (customer) in the system. This results CVE-2023-32913.3Heap-based Buffer Overflow in GitHub repository gpac/gpac prior to 2.2.2.CVE-2023-32926.1The grid-kit-premium WordPress plugin before 2.2.0 does not escape some parameters as well as generated URLs before outputting them in attri CVE-2023-32934.8Cross-site Scripting (XSS) - Stored in GitHub repository salesagility/suitecrm-core prior to 8.3.0.CVE-2023-32946.1Cross-site Scripting (XSS) - DOM in GitHub repository saleor/react-storefront prior to c29aab226f07ca980cc19787dcef101e11b83ef7.CVE-2023-32958.8The Unlimited Elements For Elementor (Free Widgets, Addons, Templates) for WordPress is vulnerable to arbitrary file uploads due to missing CVE-2023-329558.1Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in DHCP Client Functionality in Syn CVE-2023-329569.8Improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability in CGI component in Synology Router CVE-2023-329574.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Dazzlersoft Team Members Showcase plugin <= 1.3.4 versions.CVE-2023-329584.8Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Nose Graze Novelist plugin <= 1.2.0 versions.CVE-2023-329594.3Missing Authorization vulnerability in Sparkle WP MetroStore metrostore allows Exploiting Incorrectly Configured Access Control Security Lev