CVE-2023-39385

CriticalCVSS 9.1/10Last modified Nov 10, 2026

Description

Vulnerability of configuration defects in the media module of certain products.. Successful exploitation of this vulnerability may cause unauthorized access.

Metrics

CVSS 3.1 9.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Weakness enumeration

CWE-16

Affected software

VendorProductVersions
HuaweiHarmonyOS3.0.0; 2.0.0; 2.1.0
HuaweiEMUI13.0.0; 12.0.0

References

Timeline

Published
Aug 13, 2023
Last modified
Nov 10, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-393867.5Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnerability may cause newCVE-2023-393875.3Vulnerability of permission control in the window management module. Successful exploitation of this vulnerability may cause malicious pop-uCVE-2023-393887.5Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnerability may cause homCVE-2023-393897.5Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnerability may cause homCVE-2023-393910.0Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in ZkTeco-based OEM devices allowsCVE-2023-393907.5Vulnerability of input parameter verification in certain APIs in the window management module. Successful exploitation of this vulnerabilityCVE-2023-393917.5Vulnerability of system file information leakage in the USB Service module. Successful exploitation of this vulnerability may affect confideCVE-2023-393927.5Vulnerability of insecure signatures in the OsuLogin module. Successful exploitation of this vulnerability may cause OsuLogin to be maliciouCVE-2023-393937.5Vulnerability of insecure signatures in the ServiceWifiResources module. Successful exploitation of this vulnerability may cause ServiceWifiCVE-2023-393947.5Vulnerability of API privilege escalation in the wifienhance module. Successful exploitation of this vulnerability may cause the arp list toCVE-2023-393957.5Mismatch vulnerability in the serialization process in the communication system. Successful exploitation of this vulnerability may affect avCVE-2023-393967.5Deserialization vulnerability in the input module. Successful exploitation of this vulnerability may affect availability.
CVE-2023-39385: Critical severity, CVSS 9.1 | Vulnix