Lucene search

LenovoCVELIST:CVE-2023-6540

HistoryJan 03, 2024 - 9:01 p.m.

CVE-2023-6540

2024-01-0321:01:59

CWE-94

lenovo

www.cve.org

lenovo

browser

mobile

apps

android

vulnerability

disclosure

sensitive information

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

AI Score

7.5

Confidence

High

EPSS

0.001

Percentile

28.0%

JSON

A vulnerability was reported in the Lenovo Browser Mobile and Lenovo Browser HD Apps for Android that could allow an attacker to craft a payload that could result in the disclosure of sensitive information.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Lenovo Browser Mobile",
    "vendor": "Lenovo",
    "versions": [
      {
        "lessThan": "8.7.1.1",
        "status": "affected",
        "version": " ",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Lenovo Browser HD",
    "vendor": "Lenovo",
    "versions": [
      {
        "lessThan": "2.1.4.1",
        "status": "affected",
        "version": " ",
        "versionType": "custom"
      }
    ]
  }
]

References

iknow.lenovo.com.cn/detail/419251

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

AI Score

7.5

Confidence

High

EPSS

0.001

Percentile

28.0%

JSON

Related for CVELIST:CVE-2023-6540