Lucene search

K
nvd[email protected]NVD:CVE-2023-32831
HistoryJan 02, 2024 - 3:15 a.m.

CVE-2023-32831

2024-01-0203:15:07
CWE-330
web.nvd.nist.gov
2
wlan driver
pin crack
local information disclosure
insufficiently random values
patch id
issue id

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

5.1

Confidence

High

EPSS

0

Percentile

5.1%

In wlan driver, there is a possible PIN crack due to use of insufficiently random values. This could lead to local information disclosure with no execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00325055; Issue ID: MSV-868.

Affected configurations

NVD
Node
mediateksoftware_development_kitRange7.6.7.1
AND
mediatekmt6890Match-
OR
mediatekmt7612Match-
OR
mediatekmt7613Match-
OR
mediatekmt7615Match-
OR
mediatekmt7622Match-
OR
mediatekmt7626Match-
OR
mediatekmt7629Match-
OR
mediatekmt7915Match-
OR
mediatekmt7916Match-
OR
mediatekmt7981Match-
OR
mediatekmt7986Match-

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

5.1

Confidence

High

EPSS

0

Percentile

5.1%

Related for NVD:CVE-2023-32831