Vulnerabilidades em Unisoc (Shanghai) Technologies Co., Ltd.

656 resultados
Análise Vexday

Com 647 CVEs catalogadas e nenhuma presença no catálogo KEV da CISA, a Unisoc apresenta taxa de exploração ativa abaixo da média geral do catálogo, o que sugere baixa pressão ofensiva documentada no momento. O tipo de falha mais recorrente é CWE-862 (ausência de verificação de autorização), padrão que, quando explorado, permite acesso não autorizado a recursos ou funcionalidades restritas e merece atenção especial em revisões de código e hardening. A CVE mais relevante no contexto atual é CVE-2025-31715, com escore EPSS de 0,0156, indicando probabilidade de exploração ainda baixa, mas que deve ser monitorada dado seu destaque entre as ameaças ativas. As 6 vulnerabilidades surgidas nos últimos 90 dias e a ausência de PoCs públicas apontam para um perfil de risco moderado, embora a presença de 4 CVEs críticas reforce a necessidade de acompanhamento contínuo das atualizações do fabricante.

CVE-2023-42708—In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead EPSS 0.1%CVE-2022-42775MEDIUMIn camera driver, there is a possible memory corruption due to improper locking. This could lead to local denial of service in kernel.EPSS 0.1%CVE-2023-42709—In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead EPSS 0.1%CVE-2023-42698MEDIUMIn omacp service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to EPSS 0.1%CVE-2023-42672—In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to locEPSS 0.1%CVE-2023-42705—In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to locEPSS 0.1%CVE-2023-42676—In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to locEPSS 0.1%CVE-2022-47361HIGHIn firewall service, there is a missing permission check. This could lead to local escalation of privilege with system execution privileges EPSS 0.1%CVE-2023-42699—In omacp service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to EPSS 0.1%CVE-2023-42703—In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead EPSS 0.1%CVE-2023-42704—In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to locEPSS 0.1%CVE-2023-42700—In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead EPSS 0.1%CVE-2023-42706MEDIUMIn firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead EPSS 0.1%CVE-2023-42732—In telephony service, there is a possible missing permission check. This could lead to local information disclosure with no additional execuEPSS 0.1%CVE-2023-42677—In imsservice, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to locEPSS 0.1%CVE-2023-42730—In IMS service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to loEPSS 0.1%CVE-2023-42714—In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead EPSS 0.1%CVE-2023-42701—In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead EPSS 0.1%CVE-2023-42712—In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead EPSS 0.1%CVE-2023-42737—In telecom service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead tEPSS 0.1%