CVE-2023-39389

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Vulnerability of input parameters being not strictly verified in the PMS module. Successful exploitation of this vulnerability may cause home screen unavailability.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-120CWE-20CWE-1285

Affected software

No affected versions have been published.

Timeline

Published
Aug 13, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-393910.0Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in ZkTeco-based OEM devices allowsCVE-2023-393907.5Vulnerability of input parameter verification in certain APIs in the window management module. Successful exploitation of this vulnerabilityCVE-2023-393917.5Vulnerability of system file information leakage in the USB Service module. Successful exploitation of this vulnerability may affect confideCVE-2023-393927.5Vulnerability of insecure signatures in the OsuLogin module. Successful exploitation of this vulnerability may cause OsuLogin to be maliciouCVE-2023-393937.5Vulnerability of insecure signatures in the ServiceWifiResources module. Successful exploitation of this vulnerability may cause ServiceWifiCVE-2023-393947.5Vulnerability of API privilege escalation in the wifienhance module. Successful exploitation of this vulnerability may cause the arp list toCVE-2023-393957.5Mismatch vulnerability in the serialization process in the communication system. Successful exploitation of this vulnerability may affect avCVE-2023-393967.5Deserialization vulnerability in the input module. Successful exploitation of this vulnerability may affect availability.CVE-2023-393977.5Input parameter verification vulnerability in the communication system. Successful exploitation of this vulnerability may affect availabilitCVE-2023-393989.1Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be reaCVE-2023-393999.1Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be reaCVE-2023-39407.5Relative Path Traversal vulnerability in ZkTeco-based OEM devices allows an attacker to access any file on the system. This issue affects
CVE-2023-39389: High severity, CVSS 7.5 | Vulnix