CVE-2023-38523

Katalog CVE

CVSS 5.3 · Medium EPSS 1,0%

Kerentanan Missing Authentication for Critical Function pada samsung fgn1115-wp-wh firmware, samsung fgn1122-sa firmware +31 lainnya. Skor CVSS 3.1 5.3 (Medium) menurut NVD.

Deskripsi (NVD)

The web interface on multiple Samsung Harman AMX N-Series devices allows directory listing for the /tmp/ directory, without authentication, exposing sensitive information such as the command history and screenshot of the file being processed. This affects N-Series N1115 Wallplate Video Encoder before 1.15.61, N-Series N1x22A Video Encoder/Decoder before 1.15.61, N-Series N1x33A Video Encoder/Decoder before 1.15.61, N-Series N1x33 Video Encoder/Decoder before 1.15.61, N-Series N2x35 Video Encoder/Decoder before 1.15.61, N-Series N2x35A Video Encoder/Decoder before 1.15.61, N-Series N2xx2 Video Encoder/Decoder before 1.15.61, N-Series N2xx2A Video Encoder/Decoder before 1.15.61, N-Series N3000 Video Encoder/Decoder before 2.12.105, and N-Series N4321 Audio Transceiver before 1.00.06.

Rincian

Terbit di NVD

20 Juli 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.3 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-306: Missing Authentication for Critical Function

EPSS (30 hari)

1,0% peluang dieksploitasi; lebih tinggi dari 62,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://wiki.notveg.ninja/blog/CVE-2023-38523/ exploit · advisory pihak ketiga
• https://help.harmanpro.com/n1115-svsi-firmware release notes
• https://help.harmanpro.com/n1x22a-updater release notes
• https://help.harmanpro.com/n1x33-updater release notes
• https://help.harmanpro.com/n1x33a-updater release notes
• https://help.harmanpro.com/n2x35-updater-hotfix release notes
• https://help.harmanpro.com/n2x35a-updater-hotfix release notes
• https://help.harmanpro.com/n2xx2-updater-hotfix release notes
• https://help.harmanpro.com/n2xx2a-updater release notes
• https://help.harmanpro.com/n3k-updater-hotfix release notes
• https://help.harmanpro.com/svsi-n4321-firmware release notes