CVE-2023-39386

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnerability may cause newly installed apps to fail to restart.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-120CWE-20CWE-116

Affected software

No affected versions have been published.

Timeline

Published
Aug 13, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-393875.3Vulnerability of permission control in the window management module. Successful exploitation of this vulnerability may cause malicious pop-uCVE-2023-393887.5Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnerability may cause homCVE-2023-393897.5Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnerability may cause homCVE-2023-393910.0Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in ZkTeco-based OEM devices allowsCVE-2023-393907.5Vulnerability of input parameter verification in certain APIs in the window management module. Successful exploitation of this vulnerabilityCVE-2023-393917.5Vulnerability of system file information leakage in the USB Service module. Successful exploitation of this vulnerability may affect confideCVE-2023-393927.5Vulnerability of insecure signatures in the OsuLogin module. Successful exploitation of this vulnerability may cause OsuLogin to be maliciouCVE-2023-393937.5Vulnerability of insecure signatures in the ServiceWifiResources module. Successful exploitation of this vulnerability may cause ServiceWifiCVE-2023-393947.5Vulnerability of API privilege escalation in the wifienhance module. Successful exploitation of this vulnerability may cause the arp list toCVE-2023-393957.5Mismatch vulnerability in the serialization process in the communication system. Successful exploitation of this vulnerability may affect avCVE-2023-393967.5Deserialization vulnerability in the input module. Successful exploitation of this vulnerability may affect availability.CVE-2023-393977.5Input parameter verification vulnerability in the communication system. Successful exploitation of this vulnerability may affect availabilit
CVE-2023-39386: High severity, CVSS 7.5 | Vulnix