CVE-2023-42655mediumCWE-862

CVE-2023-42655: medium-severity vulnerability in Unisoc (Shanghai) Technologies Co., Ltd.

Published · Updated

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.7epss 0.1%
exploitation probability
0.1%top 100% of all CVEs
observed exploitation
nono source reports it
In sim service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Affected products
Unisoc (Shanghai) Technologies Co., Ltd. · T760/T770/T820/S8000
Related CVEs — Unisoc (Shanghai) Technologies Co., Ltd.

In the same product, most dangerous first.

CVE-2023-33914—CVE-2023-33914EPSS 0.4%CVE-2023-33915—CVE-2023-33915EPSS 0.4%CVE-2023-52533MEDIUMCVE-2023-52533EPSS 0.4%CVE-2023-52344MEDIUMCVE-2023-52344EPSS 0.4%CVE-2023-52341HIGHCVE-2023-52341EPSS 0.3%CVE-2023-52342HIGHCVE-2023-52342EPSS 0.3%
References
https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1719615756246777857