CVE-2023-40637 | Vulnetix

CVE-2023-40637 PUBLISHED CVSS 5.5 MEDIUM

In telecom service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges

EPSS 0.08% · 0.1th percentile

Risk Scores

CVSS 3.1

5.5

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS Score

0.08%

0.1th percentile

Affected Products

Vendor	Product	Versions
Unisoc (Shanghai) Technologies Co., Ltd.	SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000	*
google	android	10.0, 12.0, 11.0

Timeline

Oct 8, 2023 EPSS Score
Oct 8, 2023 CVE Published
Nov 9, 2023 EPSS Score
Dec 10, 2023 EPSS Score
Jan 11, 2024 EPSS Score
Feb 11, 2024 EPSS Score
Mar 14, 2024 EPSS Score
Apr 15, 2024 EPSS Score
May 16, 2024 EPSS Score
Jun 17, 2024 EPSS Score
Jul 18, 2024 EPSS Score
Aug 19, 2024 EPSS Score

References

https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1707266966118531074 url
https://nvd.nist.gov/vuln/detail/CVE-2023-40637 advisory

Open in Interactive Console →