First day on Intigriti: our agent harness found and proved a remote code execution bug in Odoo's program.

CVE-2023-39373

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

A Hyundai model (2017) - CWE-294: Authentication Bypass by Capture-replay.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

Affected software

Vendor	Product	Versions
Hyundai	model (2017)	—

References

Timeline

Published: Sep 3, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-393747.8ForeScout NAC SecureConnector version 11.2 - CWE-427: Uncontrolled Search Path Element CVE-2023-393759.8SiberianCMS - CWE-274: Improper Handling of Insufficient Privileges CVE-2023-393766.5SiberianCMS - CWE-284 Improper Access Control Authorized user may disable a security feature over the network CVE-2023-393777.2SiberianCMS - CWE-434: Unrestricted Upload of File with Dangerous Type - A malicious user with administrative privileges may be able to uplo CVE-2023-393788.8SiberianCMS - CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') by an unauthenticated user CVE-2023-393797.5Fujitsu Software Infrastructure Manager (ISM) stores sensitive information at the product's maintenance data (ismsnap) in cleartext form. As CVE-2023-39384.6Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in ZkTeco-based OEM devices allows an a CVE-2023-393807.5Permission control vulnerability in the audio module. Successful exploitation of this vulnerability may cause audio devices to perform abnor CVE-2023-393817.5Input verification vulnerability in the storage module. Successful exploitation of this vulnerability may cause the device to restart.CVE-2023-393827.5Input verification vulnerability in the audio module. Successful exploitation of this vulnerability may cause virtual machines (VMs) to rest CVE-2023-393837.5Vulnerability of input parameters being not strictly verified in the AMS module. Successful exploitation of this vulnerability may compromis CVE-2023-393847.5Vulnerability of incomplete permission verification in the input method module. Successful exploitation of this vulnerability may cause feat

CVE-2023-39373: Medium severity, CVSS 6.5 | Vulnix