Lucene search

LenovoCVE-2023-41830

HistoryMay 03, 2024 - 2:15 p.m.

CVE-2023-41830

2024-05-0314:15:10

CWE-36

lenovo

web.nvd.nist.gov

path traversal

ready for

unauthorized access

cve-2023-41830

nvd

CVSS3

6.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

AI Score

6.6

Confidence

Low

EPSS

Percentile

9.0%

JSON

An improper absolute path traversal vulnerability was reported for the Ready For application allowing a local application access to files without authorization.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Phones",
    "vendor": "Motorola",
    "versions": [
      {
        "lessThan": "2023-12-01",
        "status": "affected",
        "version": " ",
        "versionType": "SPL"
      }
    ]
  }
]

References

en-us.support.motorola.com/app/answers/detail/a_id/178702

CVSS3

6.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

AI Score

6.6

Confidence

Low

EPSS

Percentile

9.0%

JSON

Related for CVE-2023-41830