Lucene search

K
cve[email protected]CVE-2023-41819
HistoryMay 03, 2024 - 2:15 p.m.

CVE-2023-41819

2024-05-0314:15:08
CWE-285
web.nvd.nist.gov
26
cve-2023-41819
pendingintent hijacking
motorola face unlock
local attacker
unauthorized content providers

6.1 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

8.8%

A PendingIntent hijacking vulnerability was reported in the Motorola Face Unlock application that could allow a local attacker to access unauthorized content providers.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Phones",
    "vendor": "Motorola",
    "versions": [
      {
        "lessThan": "2023-09-01",
        "status": "affected",
        "version": " ",
        "versionType": "SPL"
      }
    ]
  }
]

6.1 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

6.5 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

8.8%

Related for CVE-2023-41819