CVE-2023-42702
First published: Mon Dec 04 2023(Updated: )
In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed
Credit: security@unisoc.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| Any of | ||
| Google Android | =11.0 | |
| Google Android | =12.0 | |
| Any of | ||
| unisoc s8000 | ||
| Unisoc SC7731 | ||
| unisoc sc9832e | ||
| unisoc sc9863a | ||
| unisoc t310 | ||
| unisoc t606 | ||
| unisoc t610 | ||
| unisoc t612 | ||
| unisoc t616 | ||
| unisoc t618 | ||
| unisoc t760 | ||
| unisoc t770 | ||
| unisoc t820 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this security issue?
The vulnerability ID for this security issue is CVE-2023-42702.
What is the severity of CVE-2023-42702?
The severity of CVE-2023-42702 is medium with a CVSS score of 5.5.
Which software versions are affected by CVE-2023-42702?
CVE-2023-42702 affects Google Android versions 11.0 and 12.0.
How can CVE-2023-42702 be exploited?
CVE-2023-42702 can be exploited by taking advantage of the missing permission check in the firewall service to write permission usage records of an app, leading to local information disclosure without additional execution privileges.
Where can I find more information about CVE-2023-42702?
More information about CVE-2023-42702 can be found at the following link: [https://www.unisoc.com/en_us/secy/announcementDetail/1731138365803266049](https://www.unisoc.com/en_us/secy/announcementDetail/1731138365803266049)
- agent/type
- agent/event
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/author
- agent/severity
- agent/weakness
- agent/last-modified-date
- agent/description
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-api
- agent/software-canonical-lookup-request
- vendor/google
- canonical/google android
- version/google android/11.0
- version/google android/12.0
- vendor/unisoc
- canonical/unisoc s8000
- canonical/unisoc sc7731
- canonical/unisoc sc9832e
- canonical/unisoc sc9863a
- canonical/unisoc t310
- canonical/unisoc t606
- canonical/unisoc t610
- canonical/unisoc t612
- canonical/unisoc t616
- canonical/unisoc t618
- canonical/unisoc t760
- canonical/unisoc t770
- canonical/unisoc t820