Lucene search
LenovoCVELIST:CVE-2023-41828HistoryMay 03, 2024 - 2:06 p.m.
CVE-2023-41828
2024-05-0314:06:34
CWE-927
lenovo
www.cve.org
motorola
phone app
vulnerability
unauthorized access
content provider
4.4 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
5 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
12.9%
An implicit intent export vulnerability was reported in the Motorola Phone application, that could allow unauthorized access to a non-exported content provider.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Phones",
"vendor": "Motorola",
"versions": [
{
"lessThan": "2023-09-01",
"status": "affected",
"version": " ",
"versionType": "SPL"
}
]
}
]
4.4 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:L
5 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
12.9%
Related for CVELIST:CVE-2023-41828