CVE-2023-52341

2024-04-0802:21:14

Unisoc

github.com

plaintext message

security activation

remote disclosure

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

yes

Technical Impact

partial

JSON

In Plaintext COUNTER CHECK message accepted before AS security activation, there is a possible missing permission check. This could lead to remote information disclosure no additional execution privileges needed

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:h:unisoc:t760:-:*:*:*:*:*:*:*"
    ],
    "vendor": "unisoc",
    "product": "t760",
    "versions": [
      {
        "status": "affected",
        "version": "t760"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:unisoc:t770:-:*:*:*:*:*:*:*"
    ],
    "vendor": "unisoc",
    "product": "t770",
    "versions": [
      {
        "status": "affected",
        "version": "t770"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:unisoc:t820:-:*:*:*:*:*:*:*"
    ],
    "vendor": "unisoc",
    "product": "t820",
    "versions": [
      {
        "status": "affected",
        "version": "t820"
      }
    ],
    "defaultStatus": "unknown"
  },
  {
    "cpes": [
      "cpe:2.3:h:unisoc:s8000:-:*:*:*:*:*:*:*"
    ],
    "vendor": "unisoc",
    "product": "s8000",
    "versions": [
      {
        "status": "affected",
        "version": "s8000"
      }
    ],
    "defaultStatus": "unknown"
  }
]