Lucene search

[email protected]CVE-2023-33898

HistoryJul 12, 2023 - 9:15 a.m.

CVE-2023-33898

2023-07-1209:15:13

CWE-862

[email protected]

web.nvd.nist.gov

telephony

service

permission check

local info

disclosure

nvd

cve-2023-33898

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

5.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

Affected configurations

NVD

Node

unisocs8000Match-

unisocsc7731eMatch-

unisocsc9832eMatch-

unisocsc9863aMatch-

unisoct310Match-

unisoct606Match-

unisoct610Match-

unisoct612Match-

unisoct616Match-

unisoct618Match-

unisoct760Match-

unisoct770Match-

unisoct820Match-

AND

googleandroidMatch10.0

googleandroidMatch11.0

googleandroidMatch12.0

googleandroidMatch13.0

CPENameOperatorVersion
unisoc:s8000unisoc s8000eq-
unisoc:sc7731eunisoc sc7731eeq-
unisoc:sc9832eunisoc sc9832eeq-
unisoc:sc9863aunisoc sc9863aeq-
unisoc:t310unisoc t310eq-
unisoc:t606unisoc t606eq-
unisoc:t610unisoc t610eq-
unisoc:t612unisoc t612eq-
unisoc:t616unisoc t616eq-
unisoc:t618unisoc t618eq-

CPE	Name	Operator	Version
unisoc:s8000	unisoc s8000	eq	-
unisoc:sc7731e	unisoc sc7731e	eq	-
unisoc:sc9832e	unisoc sc9832e	eq	-
unisoc:sc9863a	unisoc sc9863a	eq	-
unisoc:t310	unisoc t310	eq	-
unisoc:t606	unisoc t606	eq	-
unisoc:t610	unisoc t610	eq	-
unisoc:t612	unisoc t612	eq	-
unisoc:t616	unisoc t616	eq	-
unisoc:t618	unisoc t618	eq	-

Rows per page:

1-10 of 131

CNA Affected

[
  {
    "vendor": "Unisoc (Shanghai) Technologies Co., Ltd.",
    "product": "SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000",
    "versions": [
      {
        "status": "affected",
        "version": "Android10/Android11/Android12/Android13"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

References

www.unisoc.com/en_us/secy/announcementDetail/1676902764208259073

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

5.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2023-33898

prion1 cvelist1 nvd1