CVE-2023-7263

HighCVSS 7.3/10Last modified Jun 17, 2026

Description

Some Huawei home music system products have a path traversal vulnerability. Successful exploitation of this vulnerability may cause unauthorized file deletion or file permission change.(Vulnerability ID:HWPSIRT-2023-53450)

This vulnerability has been assigned a (CVE)ID:CVE-2023-7263

Metrics

CVSS 3.1 7.3/10CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Weakness enumeration

CWE-35

Affected software

VendorProductVersions
HuaweiHarmonyOS AILife Solution 8.0HarmonyOS AILife Audio Service 3.0.2.307

References

Timeline

Published
Dec 28, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2023

CVE-2023-72649.8The Build App Online plugin for WordPress is vulnerable to account takeover due to a weak password reset mechanism in all versions up to, anCVE-2023-72656.2Permission verification vulnerability in the lock screen module Impact: Successful exploitation of this vulnerability may affect availabilitCVE-2023-72668.1Some Huawei home routers have a connection hijacking vulnerability. Successful exploitation of this vulnerability may cause DoS or informatiCVE-2023-72686.5The ArtPlacer Widget WordPress plugin before 2.21.2 does not have authorisation check in place when deleting widgets, allowing ay authenticCVE-2023-72697.5The ArtPlacer Widget WordPress plugin before 2.21.2 does not have CSRF check in some places, and is missing sanitisation as well as escapingCVE-2023-72705.3An issue was discovered in SoftMaker Office 2024 / NX before revision 1214 and SoftMaker FreeOffice 2014 before revision 1215. FreeOffice 20CVE-2023-72715.5Privilege escalation vulnerability in the NMS module Impact: Successful exploitation of this vulnerability will affect availability.CVE-2023-72727.5In Eclipse Parsson before 1.0.4 and 1.1.3, a document with a large depth of nested objects can allow an attacker to cause a Java stack overfCVE-2023-72736.8Cross site request forgery in Kiteworks OwnCloud allows an unauthenticated attacker to forge requests. If a request has no Authorization heaCVE-2023-72795.9A vulnerability has been found in Secure Systems Engineering Connaisseur up to 3.3.0 and classified as problematic. This vulnerability affecCVE-2023-72814.3Inappropriate implementation in Compositing in Google Chrome prior to 119.0.6045.105 allowed a remote attacker to perform UI spoofing via a CVE-2023-72824.3Inappropriate implementation in Navigation in Google Chrome prior to 113.0.5672.63 allowed a remote attacker who convinced a user to engage
CVE-2023-7263: High severity, CVSS 7.3 | Vulnix