{"id":"CVE-2023-38523","aliases":["EUVD-2023-42322","GHSA-5m5m-q46w-3jpx"],"status":"published","title":"The web interface on multiple Samsung Harman AMX N-Series devices allows directory listing for...","description":"The web interface on multiple Samsung Harman AMX N-Series devices allows directory listing for the /tmp/ directory, without authentication, exposing sensitive information such as the command history and screenshot of the file being processed. This affects N-Series N1115 Wallplate Video Encoder before 1.15.61, N-Series N1x22A Video Encoder/Decoder before 1.15.61, N-Series N1x33A Video Encoder/Decoder before 1.15.61, N-Series N1x33 Video Encoder/Decoder before 1.15.61, N-Series N2x35 Video Encoder/Decoder before 1.15.61, N-Series N2x35A Video Encoder/Decoder before 1.15.61, N-Series N2xx2 Video Encoder/Decoder before 1.15.61, N-Series N2xx2A Video Encoder/Decoder before 1.15.61, N-Series N3000 Video Encoder/Decoder before 2.12.105, and N-Series N4321 Audio Transceiver before 1.00.06.","severity":{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01021,"percentile":0.63656,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-306"],"published":"2023-07-20T00:00:00Z","modified":"2026-06-17T06:10:38Z","products":[{"vendor":"samsung","product":"fgn1115-wp-wh_firmware"},{"vendor":"samsung","product":"fgn1122-cd_firmware"},{"vendor":"samsung","product":"fgn1122-sa_firmware"},{"vendor":"samsung","product":"fgn1133-cd_firmware"},{"vendor":"samsung","product":"fgn1133-sa_firmware"},{"vendor":"samsung","product":"fgn1133a-cd_firmware"},{"vendor":"samsung","product":"fgn1133a-sa_firmware"},{"vendor":"samsung","product":"fgn1222-cd_firmware"},{"vendor":"samsung","product":"fgn1222-sa_firmware"},{"vendor":"samsung","product":"fgn1233-cd_firmware"},{"vendor":"samsung","product":"fgn1233-sa_firmware"},{"vendor":"samsung","product":"fgn1233a-cd_firmware"},{"vendor":"samsung","product":"fgn1233a-sa_firmware"},{"vendor":"samsung","product":"fgn2122-cd_firmware"},{"vendor":"samsung","product":"fgn2122-sa_firmware"},{"vendor":"samsung","product":"fgn2122a-cd_firmware"},{"vendor":"samsung","product":"fgn2122a-sa_firmware"},{"vendor":"samsung","product":"fgn2135-cd_firmware"},{"vendor":"samsung","product":"fgn2135-sa_firmware"},{"vendor":"samsung","product":"fgn2212-cd_firmware"},{"vendor":"samsung","product":"fgn2212-sa_firmware"},{"vendor":"samsung","product":"fgn2222-cd_firmware"},{"vendor":"samsung","product":"fgn2222-sa_firmware"},{"vendor":"samsung","product":"fgn2222a-cd_firmware"},{"vendor":"samsung","product":"fgn2222a-sa_firmware"},{"vendor":"samsung","product":"fgn2235-cd_firmware"},{"vendor":"samsung","product":"fgn2235-sa_firmware"},{"vendor":"samsung","product":"fgn3132a-c_firmware"},{"vendor":"samsung","product":"fgn3132a-sa_firmware"},{"vendor":"samsung","product":"fgn3232a-c_firmware"},{"vendor":"samsung","product":"fgn3232a-sa_firmware"},{"vendor":"samsung","product":"fgn4321-cd_firmware"},{"vendor":"samsung","product":"fgn4321-sa_firmware"},{"vendor":"samsung","product":"harman_amx_n_series"}],"references":[{"url":"https://help.harmanpro.com/n1115-svsi-firmware","tags":["x_transferred","Release Notes"]},{"url":"https://help.harmanpro.com/n1x22a-updater","tags":["x_transferred","Release Notes"]},{"url":"https://help.harmanpro.com/n1x33a-updater","tags":["x_transferred","Release Notes"]},{"url":"https://help.harmanpro.com/n1x33-updater","tags":["x_transferred","Release Notes"]},{"url":"https://help.harmanpro.com/n2x35-updater-hotfix","tags":["x_transferred","Release Notes"]},{"url":"https://help.harmanpro.com/n2x35a-updater-hotfix","tags":["x_transferred","Release Notes"]},{"url":"https://help.harmanpro.com/n2xx2-updater-hotfix","tags":["x_transferred","Release Notes"]},{"url":"https://help.harmanpro.com/n2xx2a-updater","tags":["x_transferred","Release Notes"]},{"url":"https://help.harmanpro.com/svsi-n4321-firmware","tags":["x_transferred","Release Notes"]},{"url":"https://help.harmanpro.com/n3k-updater-hotfix","tags":["x_transferred","Release Notes"]},{"url":"https://wiki.notveg.ninja/blog/CVE-2023-38523/","tags":["x_transferred","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-38523"},{"url":"https://wiki.notveg.ninja/blog/CVE-2023-38523"},{"url":"https://github.com/advisories/GHSA-5m5m-q46w-3jpx"}],"sources":{"cve":[{"id":"CVE-2023-38523","description":"The web interface on multiple Samsung Harman AMX N-Series devices allows directory listing for the /tmp/ directory, without authentication, exposing sensitive information such as the command history and screenshot of the file being processed. This affects N-Series N1115 Wallplate Video Encoder before 1.15.61, N-Series N1x22A Video Encoder/Decoder before 1.15.61, N-Series N1x33A Video Encoder/Decoder before 1.15.61, N-Series N1x33 Video Encoder/Decoder before 1.15.61, N-Series N2x35 Video Encoder/Decoder before 1.15.61, N-Series N2x35A Video Encoder/Decoder before 1.15.61, N-Series N2xx2 Video Encoder/Decoder before 1.15.61, N-Series N2xx2A Video Encoder/Decoder before 1.15.61, N-Series N3000 Video Encoder/Decoder before 2.12.105, and N-Series N4321 Audio Transceiver before 1.00.06.","status":"published","published":"2023-07-20T00:00:00Z","modified":"2024-10-28T13:40:56.196Z","updated_at":"2026-11-02T14:35:29.772612Z"}],"euvd":[{"id":"EUVD-2023-42322","description":"The web interface on multiple Samsung Harman AMX N-Series devices allows directory listing for the /tmp/ directory, without authentication, exposing sensitive information such as the command history and screenshot of the file being processed. This affects N-Series N1115 Wallplate Video Encoder before 1.15.61, N-Series N1x22A Video Encoder/Decoder before 1.15.61, N-Series N1x33A Video Encoder/Decoder before 1.15.61, N-Series N1x33 Video Encoder/Decoder before 1.15.61, N-Series N2x35 Video Encoder/Decoder before 1.15.61, N-Series N2x35A Video Encoder/Decoder before 1.15.61, N-Series N2xx2 Video Encoder/Decoder before 1.15.61, N-Series N2xx2A Video Encoder/Decoder before 1.15.61, N-Series N3000 Video Encoder/Decoder before 2.12.105, and N-Series N4321 Audio Transceiver before 1.00.06.","status":"published","published":"2023-07-20T00:00:00Z","modified":"2024-10-28T13:40:56Z","updated_at":"2026-11-03T00:05:16.619611Z"}],"ghsa":[{"id":"GHSA-5m5m-q46w-3jpx","title":"The web interface on multiple Samsung Harman AMX N-Series devices allows directory listing for...","description":"The web interface on multiple Samsung Harman AMX N-Series devices allows directory listing for the /tmp/ directory, without authentication, exposing sensitive information such as the command history and screenshot of the file being processed. This affects N-Series N1115 Wallplate Video Encoder before 1.15.61, N-Series N1x22A Video Encoder/Decoder before 1.15.61, N-Series N1x33A Video Encoder/Decoder before 1.15.61, N-Series N1x33 Video Encoder/Decoder before 1.15.61, N-Series N2x35 Video Encoder/Decoder before 1.15.61, N-Series N2x35A Video Encoder/Decoder before 1.15.61, N-Series N2xx2 Video Encoder/Decoder before 1.15.61, N-Series N2xx2A Video Encoder/Decoder before 1.15.61, N-Series N3000 Video Encoder/Decoder before 2.12.105, and N-Series N4321 Audio Transceiver before 1.00.06.","status":"published","published":"2023-07-20T21:30:58Z","modified":"2024-04-04T06:18:07Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium"}],"cwes":["CWE-306"],"updated_at":"2026-11-02T14:56:40.949889Z"}],"nvd":[{"id":"CVE-2023-38523","description":"The web interface on multiple Samsung Harman AMX N-Series devices allows directory listing for the /tmp/ directory, without authentication, exposing sensitive information such as the command history and screenshot of the file being processed. This affects N-Series N1115 Wallplate Video Encoder before 1.15.61, N-Series N1x22A Video Encoder/Decoder before 1.15.61, N-Series N1x33A Video Encoder/Decoder before 1.15.61, N-Series N1x33 Video Encoder/Decoder before 1.15.61, N-Series N2x35 Video Encoder/Decoder before 1.15.61, N-Series N2x35A Video Encoder/Decoder before 1.15.61, N-Series N2xx2 Video Encoder/Decoder before 1.15.61, N-Series N2xx2A Video Encoder/Decoder before 1.15.61, N-Series N3000 Video Encoder/Decoder before 2.12.105, and N-Series N4321 Audio Transceiver before 1.00.06.","status":"published","published":"2023-07-20T19:15:10.793Z","modified":"2026-06-17T06:10:38.687Z","cvss":[{"version":"3.1","score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-306"],"updated_at":"2026-11-02T14:08:17.044696Z"}]}}