Lucene search

K
vulnrichmentLenovoVULNRICHMENT:CVE-2023-41822
HistoryMay 03, 2024 - 2:04 p.m.

CVE-2023-41822

2024-05-0314:04:49
CWE-926
lenovo
github.com
improper export
motorola
os commands

4.8 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

An improper export vulnerability was reported in the Motorola Interface Test Tool application that could allow a malicious local application to execute OS commands.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Phones",
    "vendor": "Motorola",
    "versions": [
      {
        "lessThan": "2023-12-01",
        "status": "affected",
        "version": " ",
        "versionType": "SPL"
      }
    ]
  }
]

4.8 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Related for VULNRICHMENT:CVE-2023-41822