VDB
CVE-2025-31710
CVE-2025-31710
PUBLISHED
CVSS 5.900000095367432 MEDIUM
In engineermode service, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed.
EPSS 0.36% · 29.9th percentile
Risk Scores
CVSS 3.1
5.900000095367432
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
EPSS Score
0.36%
29.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Unisoc (Shanghai) Technologies Co., Ltd. | SC9863A/T606/T612/T616/T750/T765/T760/T770/T820/S8000/T8300/T9300 | Android13/Android14/Android15 |
| android | 13.0, 14.0, 15.0 |
Timeline
- Jun 3, 2025 EPSS Score
- Jun 3, 2025 CVE Published
- Jun 3, 2025 PoC Published
- Jun 3, 2025 CVE Updated
- Jun 9, 2025 EPSS Score
- Jun 11, 2025 EPSS Score
- Jun 14, 2025 EPSS Score
- Jun 17, 2025 Coalition ESS Score
- Jun 25, 2025 EPSS Score
- Jul 6, 2025 EPSS Score
- Jul 17, 2025 EPSS Score
- Jul 28, 2025 EPSS Score