Lucene search

LenovoCVE-2023-41823

HistoryMay 03, 2024 - 2:15 p.m.

CVE-2023-41823

2024-05-0314:15:09

CWE-926

lenovo

web.nvd.nist.gov

motorola

phone extension

export vulnerability

local attacker

unauthorized activities

CVSS3

4.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L

AI Score

6.8

Confidence

Low

EPSS

Percentile

12.7%

JSON

An improper export vulnerability was reported in the Motorola Phone Extension application, that could allow a local attacker to execute unauthorized Activities.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Phones",
    "vendor": "Motorola",
    "versions": [
      {
        "lessThan": "2023-12-01",
        "status": "affected",
        "version": "  ",
        "versionType": "SPL"
      }
    ]
  }
]

References

en-us.support.motorola.com/app/answers/detail/a_id/178705

CVSS3

4.4

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L

AI Score

6.8

Confidence

Low

EPSS

Percentile

12.7%

JSON

Related for CVE-2023-41823