Lucene search

[email protected]CVE-2021-23243

HistorySep 27, 2021 - 1:15 p.m.

CVE-2021-23243

2021-09-2713:15:07

[email protected]

web.nvd.nist.gov

oppo

battery app

third-party

sdk

security vulnerability

cve-2021-23243

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

In Oppo’s battery application, the third-party SDK provides the function of loading a third-party Provider, which can be used.

Affected configurations

NVD

Node

oppooppo_a12Match-

oppooppo_a15Match-

oppooppo_a15sMatch-

oppooppo_a31Match-

oppooppo_a33Match-

oppooppo_a5_2020Match-

oppooppo_a52Match-

oppooppo_a53Match-

oppooppo_a54_5gMatch-

oppooppo_a73_5gMatch-

oppooppo_a74_5gMatch-

oppooppo_a9_2020Match-

oppooppo_a91Match-

oppooppo_a92Match-

oppooppo_a93Match-

oppooppo_a94Match-

oppooppo_f11_proMatch-

oppooppo_f11_proMatch-marvel\'s_avengers

oppooppo_find_xMatch-

oppooppo_find_x_lamborghiniMatch-

oppooppo_find_x2Match-

oppooppo_find_x2_proMatch-

oppooppo_find_x2_proMatch-automobili_lamborghini

oppooppo_find_x3_proMatch-

oppooppo_renoMatch-fc_barcelona

oppooppo_reno_10x_zoomMatch-

oppooppo_reno_5gMatch-

oppooppo_reno_zMatch-

oppooppo_reno3Match-

oppooppo_reno3_proMatch-

oppooppo_reno4_5gMatch-

oppooppo_reno4_pro_5gMatch-

oppooppo_reno4_z_5gMatch-

oppooppo_reno5_4gMatch-

oppooppo_reno5_5gMatch-

oppooppo_reno5_pro_5gMatch-

oppooppo_x_2021Match-

AND

googleandroidMatch11.0

CPENameOperatorVersion
google:androidgoogle androideq11.0

CPE	Name	Operator	Version
google:android	google android	eq	11.0

CNA Affected

[
  {
    "product": "OPPO Android Phone with Qualcomm chipset",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "OPPO Mobile phones with Qualcomm chipset and Android 11 versions"
      }
    ]
  }
]

References

security.oppo.com/en/noticeDetail?notice_only_key=NOTICE-1437389627236556800

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.5 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.7%

JSON

Related for CVE-2021-23243

prion1 nvd1 cvelist1