What’s Vulnerable › Vulnerabilities

CVE-2023-38523

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-07-20 · updated 2026-06-17
• Weakness: CWE-306

Description

The web interface on multiple Samsung Harman AMX N-Series devices allows directory listing for the /tmp/ directory, without authentication, exposing sensitive information such as the command history and screenshot of the file being processed. This affects N-Series N1115 Wallplate Video Encoder before 1.15.61, N-Series N1x22A Video Encoder/Decoder before 1.15.61, N-Series N1x33A Video Encoder/Decoder before 1.15.61, N-Series N1x33 Video Encoder/Decoder before 1.15.61, N-Series N2x35 Video Encoder/Decoder before 1.15.61, N-Series N2x35A Video Encoder/Decoder before 1.15.61, N-Series N2xx2 Video Encoder/Decoder before 1.15.61, N-Series N2xx2A Video Encoder/Decoder before 1.15.61, N-Series N3000 Video Encoder/Decoder before 2.12.105, and N-Series N4321 Audio Transceiver before 1.00.06.

Affected products

• Samsung Fgn1115-Wp-Wh Firmware: before 1.15.61 — fixed in 1.15.61
• Samsung Fgn1122-Cd Firmware: before 1.15.61 — fixed in 1.15.61
• Samsung Fgn1122-Sa Firmware: before 1.15.61 — fixed in 1.15.61
• Samsung Fgn1133-Cd Firmware: before 1.15.61 — fixed in 1.15.61
• Samsung Fgn1133-Sa Firmware: before 1.15.61 — fixed in 1.15.61
• Samsung Fgn1133A-Cd Firmware: before 1.15.61 — fixed in 1.15.61
• Samsung Fgn1133A-Sa Firmware: before 1.15.61 — fixed in 1.15.61
• Samsung Fgn1222-Cd Firmware: before 1.15.61 — fixed in 1.15.61
• Samsung Fgn1222-Sa Firmware: before 1.15.61 — fixed in 1.15.61
• Samsung Fgn1233-Cd Firmware: before 1.15.61 — fixed in 1.15.61
• Samsung Fgn1233-Sa Firmware: before 1.15.61 — fixed in 1.15.61
• Samsung Fgn1233A-Cd Firmware: before 1.15.61 — fixed in 1.15.61
• Samsung Fgn1233A-Sa Firmware: before 1.15.61 — fixed in 1.15.61
• Samsung Fgn2122-Cd Firmware: before 1.15.61 — fixed in 1.15.61
• Samsung Fgn2122-Sa Firmware: before 1.15.61 — fixed in 1.15.61
• Samsung Fgn2122A-Cd Firmware: before 1.15.61 — fixed in 1.15.61
• Samsung Fgn2122A-Sa Firmware: before 1.15.61 — fixed in 1.15.61
• Samsung Fgn2135-Cd Firmware: before 1.15.61 — fixed in 1.15.61
• Samsung Fgn2135-Sa Firmware: before 1.15.61 — fixed in 1.15.61
• Samsung Fgn2212-Cd Firmware: before 1.15.61 — fixed in 1.15.61
• Samsung Fgn2212-Sa Firmware: before 1.15.61 — fixed in 1.15.61
• Samsung Fgn2222-Cd Firmware: before 1.15.61 — fixed in 1.15.61
• Samsung Fgn2222-Sa Firmware: before 1.15.61 — fixed in 1.15.61
• Samsung Fgn2222A-Cd Firmware: before 1.15.61 — fixed in 1.15.61
• Samsung Fgn2222A-Sa Firmware: before 1.15.61 — fixed in 1.15.61
• Samsung Fgn2235-Cd Firmware: before 1.15.61 — fixed in 1.15.61
• Samsung Fgn2235-Sa Firmware: before 1.15.61 — fixed in 1.15.61
• Samsung Fgn3132A-C Firmware: before 2.12.105 — fixed in 2.12.105
• Samsung Fgn3132A-Sa Firmware: before 2.12.105 — fixed in 2.12.105
• Samsung Fgn3232A-C Firmware: before 2.12.105 — fixed in 2.12.105

How to fix

Upgrade to a fixed version: Samsung Fgn1115-Wp-Wh Firmware 1.15.61; Samsung Fgn1122-Cd Firmware 1.15.61; Samsung Fgn1122-Sa Firmware 1.15.61; Samsung Fgn1133-Cd Firmware 1.15.61; Samsung Fgn1133-Sa Firmware 1.15.61; Samsung Fgn1133A-Cd Firmware 1.15.61; Samsung Fgn1133A-Sa Firmware 1.15.61; Samsung Fgn1222-Cd Firmware 1.15.61; Samsung Fgn1222-Sa Firmware 1.15.61; Samsung Fgn1233-Cd Firmware 1.15.61; Samsung Fgn1233-Sa Firmware 1.15.61; Samsung Fgn1233A-Cd Firmware 1.15.61. Check the vendor advisory for mitigations.

References

• https://help.harmanpro.com/n1115-svsi-firmware
• https://help.harmanpro.com/n1x22a-updater
• https://help.harmanpro.com/n1x33-updater
• https://help.harmanpro.com/n1x33a-updater
• https://help.harmanpro.com/n2x35-updater-hotfix
• https://help.harmanpro.com/n2x35a-updater-hotfix
• https://help.harmanpro.com/n2xx2-updater-hotfix
• https://help.harmanpro.com/n2xx2a-updater
• https://help.harmanpro.com/n3k-updater-hotfix
• https://help.harmanpro.com/svsi-n4321-firmware
• https://wiki.notveg.ninja/blog/CVE-2023-38523/
• https://help.harmanpro.com/n1115-svsi-firmware

Get alerted when CVE-2023-38523 or the next vulnerability affects your stack