CVE-2023-34161

HighCVSS 7.5

Published: 19/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.40%

32th percentile - higher than 32% of all known CVEs

Summary

There is an inappropriate authorization vulnerability in the SettingsProvider module. Successful exploitation of this vulnerability may cause features to perform abnormally.

Risk Assessment

The organization may experience functionality issues, potentially leading to disruptions in operations.

Recommendation

It is recommended to review and strengthen the authorization mechanisms in the SettingsProvider module.

Other vulnerabilities in SettingsProvider

CVE-2026-21099Medium
Improper access control in SettingsProvider prior to SMR Sep-2026 Release 1 allows local attackers to access sensitive information.

Original NVD description (English source)

nappropriate authorization vulnerability in the SettingsProvider module.Successful exploitation of this vulnerability may cause features to perform abnormally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS