Lucene search
HistoryAug 01, 2023 - 11:15 p.m.
CVE-2023-36351
cybersecurity
vulnerability
cve-2023-36351
android
viatom health
remote code execution
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
7.8 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
45.3%
An issue in Viatom Health ViHealth for Android v.2.74.58 and before allows a remote attacker to execute arbitrary code via the com.viatom.baselib.mvvm.webWebViewActivity component.
Affected configurations
Node
viatomtechvihealthRange≤2.74.58android
| CPE | Name | Operator | Version |
|---|---|---|---|
| viatomtech:vihealth | viatomtech vihealth | le | 2.74.58 |
Related
cvelist
cvelist
CVE-2023-36351
2023-08-01 00:00:00
nvd
nvd
CVE-2023-36351
2023-08-01 23:15:30
prion
prion
Design/Logic Flaw
2023-08-01 23:15:00
7.8 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
7.8 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
45.3%
Related for CVE-2023-36351