CVE-2023-38464highCWE-862

CVE-2023-38464: high-severity vulnerability in Unisoc (Shanghai) Technologies Co., Ltd.

Published · Updated

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.8epss 0.1%
exploitation probability
0.1%top 100% of all CVEs
observed exploitation
nono source reports it
In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
Unisoc (Shanghai) Technologies Co., Ltd. · SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618
Related CVEs — Unisoc (Shanghai) Technologies Co., Ltd.

In the same product, most dangerous first.

CVE-2023-38438—CVE-2023-38438EPSS 0.1%CVE-2023-38437—CVE-2023-38437EPSS 0.1%CVE-2023-38436—CVE-2023-38436EPSS 0.1%CVE-2023-33918—CVE-2023-33918EPSS 0.1%CVE-2023-33917—CVE-2023-33917EPSS 0.1%CVE-2023-33916—CVE-2023-33916EPSS 0.1%
References
https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1698296481653522434