CVE-2023-39394
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published Aug 13, 2023
Updated: Aug 17, 2023
CWE ID 264
Summary
CVE-2023-39394 is a newly disclosed vulnerability affecting the wifienhance module's API. This issue enables privilege escalation, granting unauthorized access to an attacker. Successfully exploiting this flaw can result in the arp list being manipulated, potentially leading to network disruptions or unauthorized network traffic routing. Organizations using this module are advised to apply the available patches promptly to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Products
- HarmonyOS
- Huawei EMUI
Affected Vendors
- Huawei Technologies