Lucene search
HistoryOct 25, 2023 - 6:17 p.m.
CVE-2023-41960
android
agent
vulnerability
untrusted app
modify
sensitive settings
3.3 Low
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
0.0004 Low
EPSS
Percentile
9.2%
The vulnerability allows an unprivileged(untrusted) third-party application to interact with a content-provider unsafely exposed by the Android Agent application, potentially modifying sensitive settings of the Android Client application itself.
Affected configurations
Node
boschrexrothctrlx_hmi_web_panel_wr2107_firmware
boschrexrothctrlx_hmi_web_panel_wr2107Match-
Node
boschrexrothctrlx_hmi_web_panel_wr2110Match-
boschrexrothctrlx_hmi_web_panel_wr2110_firmware
Node
boschrexrothctrlx_hmi_web_panel_wr2115Match-
boschrexrothctrlx_hmi_web_panel_wr2115_firmware
Related
cve
cve
CVE-2023-41960
2023-10-25 18:17:31
prion
prion
Design/Logic Flaw
2023-10-25 18:17:00
cvelist
cvelist
CVE-2023-41960
2023-10-25 14:12:08
3.3 Low
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
0.0004 Low
EPSS
Percentile
9.2%
Related for NVD:CVE-2023-41960