CVE-2023-39394
First published: Sun Aug 13 2023(Updated: )
Vulnerability of API privilege escalation in the wifienhance module. Successful exploitation of this vulnerability may cause the arp list to be modified.
Credit: psirt@huawei.com psirt@huawei.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Huawei Emui | =12.0.1 | |
| Huawei Emui | =13.0.0 | |
| Huawei Harmonyos | =2.0.1 | |
| Huawei Harmonyos | =3.0.0 | |
| Huawei Harmonyos | =3.1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID of this API privilege escalation vulnerability in the wifienhance module?
The vulnerability ID is CVE-2023-39394.
What is the severity of CVE-2023-39394?
The severity of CVE-2023-39394 is high. It has a severity value of 7.5.
Which software versions are affected by CVE-2023-39394?
CVE-2023-39394 affects Huawei Emui versions 12.0.1 and 13.0.0, and Huawei Harmonyos versions 2.0.1, 3.0.0, and 3.1.0.
What can happen if CVE-2023-39394 is successfully exploited?
Successful exploitation of CVE-2023-39394 may cause the arp list to be modified.
How can I fix CVE-2023-39394?
To fix CVE-2023-39394, it is recommended to install the latest security update provided by Huawei. Refer to the official Huawei support bulletin and HarmonyOS documentation for more information.
- collector/nvd-api
- collector/nvd-index
- agent/weakness
- agent/severity
- agent/references
- agent/author
- agent/type
- agent/event
- agent/description
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/huawei
- canonical/huawei emui
- version/huawei emui/12.0.1
- version/huawei emui/13.0.0
- canonical/huawei harmonyos
- version/huawei harmonyos/2.0.1
- version/huawei harmonyos/3.0.0
- version/huawei harmonyos/3.1.0