CVE-2023-42648 | Vulnetix

CVE-2023-42648 PUBLISHED CVSS 5.5 MEDIUM

In engineermode, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed

EPSS 0.08% · 0.2th percentile

Risk Scores

CVSS 3.1

5.5

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS Score

0.08%

0.2th percentile

Affected Products

Vendor	Product	Versions
Unisoc (Shanghai) Technologies Co., Ltd.	SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000	Android11/Android12/Android13
google	android	12.0, 13.0, 11.0

Timeline

Nov 1, 2023 CVE Published
Nov 2, 2023 EPSS Score
Dec 3, 2023 EPSS Score
Jan 2, 2024 EPSS Score
Feb 2, 2024 EPSS Score
Mar 4, 2024 EPSS Score
Apr 4, 2024 EPSS Score
May 4, 2024 EPSS Score
Jun 4, 2024 EPSS Score
Jul 5, 2024 EPSS Score
Aug 5, 2024 EPSS Score
Sep 4, 2024 EPSS Score

References

https://nvd.nist.gov/vuln/detail/CVE-2023-42648 advisory
https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1719615756246777857 url

Open in Interactive Console →