CVE-2023-39394

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Aug 13, 2023
Updated: Aug 17, 2023
CWE ID 264

Summary

CVE-2023-39394 is a newly disclosed vulnerability affecting the wifienhance module's API. This issue enables privilege escalation, granting unauthorized access to an attacker. Successfully exploiting this flaw can result in the arp list being manipulated, potentially leading to network disruptions or unauthorized network traffic routing. Organizations using this module are advised to apply the available patches promptly to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • HarmonyOS
  • Huawei EMUI

Affected Vendors

  • Huawei Technologies