Lucene search

K
cveLenovoCVE-2023-41822
HistoryMay 03, 2024 - 2:15 p.m.

CVE-2023-41822

2024-05-0314:15:09
CWE-926
lenovo
web.nvd.nist.gov
42
motorola interface test tool
improper export
vulnerability
os commands

CVSS3

4.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

AI Score

6.8

Confidence

Low

EPSS

0

Percentile

9.0%

An improper export vulnerability was reported in the Motorola Interface Test Tool application that could allow a malicious local application to execute OS commands.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Phones",
    "vendor": "Motorola",
    "versions": [
      {
        "lessThan": "2023-12-01",
        "status": "affected",
        "version": " ",
        "versionType": "SPL"
      }
    ]
  }
]

CVSS3

4.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

AI Score

6.8

Confidence

Low

EPSS

0

Percentile

9.0%

Related for CVE-2023-41822