CVE-2023-33898: Medium severity UNISOC S8000 vulnerability
Published Jul 12, 2023
·Updated
In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.
Affected Software
34 affected components
UNISOC S8000
UNISOC Sc7731e
UNISOC Sc9832e
UNISOC Sc9863a
UNISOC T310
UNISOC T606
UNISOC T610
UNISOC T612
UNISOC T616
UNISOC T618
UNISOC T760
UNISOC T770
UNISOC T820
Google Android=10.0
Google Android=11.0
Google Android=12.0
Google Android=13.0
All of the following
Any of the following
UNISOC S8000
UNISOC Sc7731e
UNISOC Sc9832e
UNISOC Sc9863a
UNISOC T310
UNISOC T606
UNISOC T610
UNISOC T612
UNISOC T616
UNISOC T618
UNISOC T760
UNISOC T770
UNISOC T820
Any of the following
Google Android=10.0
Google Android=11.0
Google Android=12.0
Google Android=13.0
Event History
Jul 12, 2023
CVE Published
via MITRE·08:31 AM
Data Sourced
via MITRE·08:31 AM
Description
Data Sourced
09:15 AM
DescriptionSeverityWeaknessAffected Software
Data Sourced
via NVD·09:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2023-33898.
2
What is the severity of CVE-2023-33898?
The severity of CVE-2023-33898 is medium with a severity value of 5.5.
3
Which software is affected by CVE-2023-33898?
The Unisoc S8000, Sc7731e, Sc9832e, Sc9863a, T310, T606, T610, T612, T616, T618, T760, and T770 are affected by CVE-2023-33898.
4
How can CVE-2023-33898 be exploited?
CVE-2023-33898 can be exploited by exploiting the missing permission check in the telephony service, leading to local information disclosure.
5
Is Google Android vulnerable to CVE-2023-33898?
No, Google Android versions 10.0, 11.0, 12.0, and 13.0 are not vulnerable to CVE-2023-33898.