CVE-2023-39400: Path Traversal

Published Aug 13, 2023

Updated

Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written without authorization.

Affected Software

9 affected components

Huawei Emui=11.0.1

Huawei Emui=12.0.0

Huawei Emui=12.0.1

Huawei Emui=13.0.0

Huawei Harmonyos=2.0.0

Huawei Harmonyos=2.0.1

Huawei Harmonyos=2.1.0

Huawei Harmonyos=3.0.0

Huawei Harmonyos=3.1.0

Event History

Aug 13, 2023

CVE Published

via MITRE·12:36 PM

Data Sourced

via MITRE·12:36 PM

DescriptionWeakness

Frequently Asked Questions

What is CVE-2023-39400?

CVE-2023-39400 is a parameter verification vulnerability in the installd module that allows unauthorized reading and writing of sandbox files.

What is the severity of CVE-2023-39400?

CVE-2023-39400 has a severity rating of 9.1, which is classified as critical.

Which software versions are affected by CVE-2023-39400?

CVE-2023-39400 affects Huawei devices running Emui 11.0.1, Emui 12.0.0, Emui 12.0.1, Emui 13.0.0, Harmonyos 2.0.0, Harmonyos 2.0.1, Harmonyos 2.1.0, Harmonyos 3.0.0, and Harmonyos 3.1.0.

How can I fix CVE-2023-39400?

To fix CVE-2023-39400, it is recommended to apply the security updates provided by Huawei for the affected software versions.

Where can I find more information about CVE-2023-39400?

You can find more information about CVE-2023-39400 in the security bulletins published by Huawei on their support website and the HarmonyOS documentation.