CVE-2023-39383

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Vulnerability of input parameters being not strictly verified in the AMS module. Successful exploitation of this vulnerability may compromise apps' data security.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200CWE-668

Affected software

VendorProductVersions
HuaweiHarmonyOS3.1.0; 3.0.0; 2.1.0; 2.0.0; 2.0.1
HuaweiEMUI13.0.0; 12.0.1; 12.0.0; 11.0.1

References

Timeline

Published
Aug 13, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-393847.5Vulnerability of incomplete permission verification in the input method module. Successful exploitation of this vulnerability may cause featCVE-2023-393859.1Vulnerability of configuration defects in the media module of certain products.. Successful exploitation of this vulnerability may cause unaCVE-2023-393867.5Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnerability may cause newCVE-2023-393875.3Vulnerability of permission control in the window management module. Successful exploitation of this vulnerability may cause malicious pop-uCVE-2023-393887.5Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnerability may cause homCVE-2023-393897.5Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnerability may cause homCVE-2023-393910.0Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in ZkTeco-based OEM devices allowsCVE-2023-393907.5Vulnerability of input parameter verification in certain APIs in the window management module. Successful exploitation of this vulnerabilityCVE-2023-393917.5Vulnerability of system file information leakage in the USB Service module. Successful exploitation of this vulnerability may affect confideCVE-2023-393927.5Vulnerability of insecure signatures in the OsuLogin module. Successful exploitation of this vulnerability may cause OsuLogin to be maliciouCVE-2023-393937.5Vulnerability of insecure signatures in the ServiceWifiResources module. Successful exploitation of this vulnerability may cause ServiceWifiCVE-2023-393947.5Vulnerability of API privilege escalation in the wifienhance module. Successful exploitation of this vulnerability may cause the arp list to
CVE-2023-39383: High severity, CVSS 7.5 | Vulnix