Lucene search

K
cve[email protected]CVE-2023-38450
HistorySep 04, 2023 - 2:15 a.m.

CVE-2023-38450

2023-09-0402:15:09
CWE-862
web.nvd.nist.gov
12
vowifiservice
local escalation
privilege
cve-2023-38450
nvd

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

5.1%

In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges

Affected configurations

NVD
Node
googleandroidMatch11.0-
AND
unisocsc7731eMatch-
OR
unisocsc9832eMatch-
OR
unisocsc9863aMatch-
OR
unisoct606Match-
OR
unisoct610Match-
OR
unisoct612Match-
OR
unisoct616Match-
OR
unisoct618Match-
CPENameOperatorVersion
google:androidgoogle androideq11.0

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "SC9832E/SC9863A/T606/T612/T616/T610/T618",
    "versions": [
      {
        "version": "Android9/Android10/Android11",
        "status": "affected"
      }
    ],
    "vendor": "Unisoc (Shanghai) Technologies Co., Ltd."
  }
]

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

5.1%

Related for CVE-2023-38450