CVE-2023-42717 | Vulnetix

CVE-2023-42717 PUBLISHED CVSS 7.5 HIGH

In telephony service, there is a possible missing permission check. This could lead to remote information disclosure no additional execution privileges needed

EPSS 0.44% · 38.1th percentile

Risk Scores

CVSS 3.1

7.5

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS Score

0.44%

38.1th percentile

Affected Products

Vendor	Product	Versions
google	android	11.0, 12.0
Unisoc (Shanghai) Technologies Co., Ltd.	SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000	*

Timeline

Dec 4, 2023 EPSS Score
Dec 4, 2023 CVE Published
Jan 3, 2024 EPSS Score
Feb 2, 2024 EPSS Score
Mar 3, 2024 EPSS Score
Apr 2, 2024 EPSS Score
May 2, 2024 EPSS Score
Jun 1, 2024 EPSS Score
Jul 1, 2024 EPSS Score
Jul 30, 2024 EPSS Score
Aug 2, 2024 CVE Updated
Aug 29, 2024 EPSS Score

References

https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1731138365803266049 url
https://nvd.nist.gov/vuln/detail/CVE-2023-42717 advisory

Open in Interactive Console →