Lucene search
UnisocCVE-2023-33898HistoryJul 12, 2023 - 9:15 a.m.
CVE-2023-33898
2023-07-1209:15:13
CWE-862
Unisoc
web.nvd.nist.gov
13
telephony
service
permission check
local info
disclosure
nvd
cve-2023-33898
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
AI Score
5.2
Confidence
High
EPSS
0
Percentile
5.1%
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Affected configurations
Node
unisocs8000Match-
ORunisocsc7731eMatch-
ORunisocsc9832eMatch-
ORunisocsc9863aMatch-
ORunisoct310Match-
ORunisoct606Match-
ORunisoct610Match-
ORunisoct612Match-
ORunisoct616Match-
ORunisoct618Match-
ORunisoct760Match-
ORunisoct770Match-
ORunisoct820Match-
googleandroidMatch10.0
ORgoogleandroidMatch11.0
ORgoogleandroidMatch12.0
ORgoogleandroidMatch13.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| unisoc | s8000 | - | cpe:2.3:h:unisoc:s8000:-:*:*:*:*:*:*:* |
| unisoc | sc7731e | - | cpe:2.3:h:unisoc:sc7731e:-:*:*:*:*:*:*:* |
| unisoc | sc9832e | - | cpe:2.3:h:unisoc:sc9832e:-:*:*:*:*:*:*:* |
| unisoc | sc9863a | - | cpe:2.3:h:unisoc:sc9863a:-:*:*:*:*:*:*:* |
| unisoc | t310 | - | cpe:2.3:h:unisoc:t310:-:*:*:*:*:*:*:* |
| unisoc | t606 | - | cpe:2.3:h:unisoc:t606:-:*:*:*:*:*:*:* |
| unisoc | t610 | - | cpe:2.3:h:unisoc:t610:-:*:*:*:*:*:*:* |
| unisoc | t612 | - | cpe:2.3:h:unisoc:t612:-:*:*:*:*:*:*:* |
| unisoc | t616 | - | cpe:2.3:h:unisoc:t616:-:*:*:*:*:*:*:* |
| unisoc | t618 | - | cpe:2.3:h:unisoc:t618:-:*:*:*:*:*:*:* |
CNA Affected
[
{
"vendor": "Unisoc (Shanghai) Technologies Co., Ltd.",
"product": "SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000",
"versions": [
{
"status": "affected",
"version": "Android10/Android11/Android12/Android13"
}
],
"defaultStatus": "unaffected"
}
]Related
cvelist
cvelist
CVE-2023-33898
2023-07-12 08:31:58
prion
prion
Information disclosure
2023-07-12 09:15:00
nvd
nvd
CVE-2023-33898
2023-07-12 09:15:13
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
AI Score
5.2
Confidence
High
EPSS
0
Percentile
5.1%
Related for CVE-2023-33898