CVE-2023-38523

Published Jul 20, 2023 CVSS 3.1 · 5.3 Medium EPSS 1.0% KEV · Not listed
Description
The web interface on multiple Samsung Harman AMX N-Series devices allows directory listing for the /tmp/ directory, without authentication, exposing sensitive information such as the command history and screenshot of the file being processed. This affects N-Series N1115 Wallplate Video Encoder before 1.15.61, N-Series N1x22A Video Encoder/Decoder before 1.15.61, N-Series N1x33A Video Encoder/Decoder before 1.15.61, N-Series N1x33 Video Encoder/Decoder before 1.15.61, N-Series N2x35 Video Encoder/Decoder before 1.15.61, N-Series N2x35A Video Encoder/Decoder before 1.15.61, N-Series N2xx2 Video Encoder/Decoder before 1.15.61, N-Series N2xx2A Video Encoder/Decoder before 1.15.61, N-Series N3000 Video Encoder/Decoder before 2.12.105, and N-Series N4321 Audio Transceiver before 1.00.06.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2023-42322 The web interface on multiple Samsung Harman AMX N-Series devices allows directory listing for the /tmp/ directory, without authentication, exposing sensitive information such as the command history and screenshot of the file being processed. This affects N-Series N1115 Wallplate Video Encoder before 1.15.61, N-Series N1x22A Video Encoder/Decoder before 1.15.61, N-Series N1x33A Video Encoder/Decoder before 1.15.61, N-Series N1x33 Video Encoder/Decoder before 1.15.61, N-Series N2x35 Video Encoder/Decoder before 1.15.61, N-Series N2x35A Video Encoder/Decoder before 1.15.61, N-Series N2xx2 Video Encoder/Decoder before 1.15.61, N-Series N2xx2A Video Encoder/Decoder before 1.15.61, N-Series N3000 Video Encoder/Decoder before 2.12.105, and N-Series N4321 Audio Transceiver before 1.00.06.
History
Type Values Removed Values Added
First Time appeared Samsung harman Amx N Series
CPEs cpe:2.3:a:samsung:harman_amx_n_series:*:*:*:*:*:*:*:*
Vendors & Products Samsung harman Amx N Series
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Subscriptions

Samsung Fgn1115-wp-wh Fgn1115-wp-wh Firmware Fgn1122-cd Fgn1122-cd Firmware Fgn1122-sa Fgn1122-sa Firmware Fgn1133-cd Fgn1133-cd Firmware Fgn1133-sa Fgn1133-sa Firmware Fgn1133a-cd Fgn1133a-cd Firmware Fgn1133a-sa Fgn1133a-sa Firmware Fgn1222-cd Fgn1222-cd Firmware Fgn1222-sa Fgn1222-sa Firmware Fgn1233-cd Fgn1233-cd Firmware Fgn1233-sa Fgn1233-sa Firmware Fgn1233a-cd Fgn1233a-cd Firmware Fgn1233a-sa Fgn1233a-sa Firmware Fgn2122-cd Fgn2122-cd Firmware Fgn2122-sa Fgn2122-sa Firmware Fgn2122a-cd Fgn2122a-cd Firmware Fgn2122a-sa Fgn2122a-sa Firmware Fgn2135-cd Fgn2135-cd Firmware Fgn2135-sa Fgn2135-sa Firmware Fgn2212-cd Fgn2212-cd Firmware Fgn2212-sa Fgn2212-sa Firmware Fgn2222-cd Fgn2222-cd Firmware Fgn2222-sa Fgn2222-sa Firmware Fgn2222a-cd Fgn2222a-cd Firmware Fgn2222a-sa Fgn2222a-sa Firmware Fgn2235-cd Fgn2235-cd Firmware Fgn2235-sa Fgn2235-sa Firmware Fgn3132a-c Fgn3132a-c Firmware Fgn3132a-sa Fgn3132a-sa Firmware Fgn3232a-c Fgn3232a-c Firmware Fgn3232a-sa Fgn3232a-sa Firmware Fgn4321-cd Fgn4321-cd Firmware Fgn4321-sa Fgn4321-sa Firmware Harman Amx N Series
Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Oct 28, 2024, 1:40 PM
Reserved
Jul 19, 2023, 12:00 AM
Status
Modified
Published
Jul 20, 2023, 7:15 PM
Modified
Jun 17, 2026, 6:10 AM