« Volver al listado

CVE-2023-40631

Estado: ModificadaMedia (4.4)—

En Dialer, es posible que falte una verificación de permisos. Esto podría conducir a la divulgación de información local con privilegios de ejecución de System necesarios.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Google — Android

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2023-40631",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2023-40631",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-09-19T18:40:52.812835Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 4.4,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 3.6,
        "exploitabilityScore": 0.8
      }
    ]
  },
  "affected": [
    {
      "source": "security@unisoc.com",
      "affectedData": [
        {
          "vendor": "Unisoc (Shanghai) Technologies Co., Ltd.",
          "product": "SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000",
          "versions": [
            {
              "status": "affected",
              "version": "Android10/Android11/Android12"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2023-10-08T04:15:55.547",
  "references": [
    {
      "url": "https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1707266966118531074",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "security@unisoc.com"
    },
    {
      "url": "https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1707266966118531074",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-862"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "In Dialer, there is a possible missing permission check. This could lead to local information disclosure with System execution privileges needed"
    },
    {
      "lang": "es",
      "value": "En Dialer, es posible que falte una verificación de permisos. Esto podría conducir a la divulgación de información local con privilegios de ejecución de System necesarios."
    }
  ],
  "lastModified": "2026-06-17T06:18:48.197",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D558D965-FA70-4822-A770-419E73BA9ED3"
            },
            {
              "criteria": "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64"
            },
            {
              "criteria": "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:unisoc:s8000:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "FDE05D06-C798-4217-8858-8C5DC2C94751"
            },
            {
              "criteria": "cpe:2.3:h:unisoc:sc7731e:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "AC867249-B767-4802-868D-6D0E356C8294"
            },
            {
              "criteria": "cpe:2.3:h:unisoc:sc9832e:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "25BBD3C5-E87C-4730-970C-19DF855AC3A2"
            },
            {
              "criteria": "cpe:2.3:h:unisoc:sc9863a:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "DE00DFDE-97DD-4D33-B580-73FEF677C71B"
            },
            {
              "criteria": "cpe:2.3:h:unisoc:t310:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "F20E00D8-2F00-4FA3-9455-37DC89908D96"
            },
            {
              "criteria": "cpe:2.3:h:unisoc:t606:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "905E39DD-7948-40A4-B042-EBB9A9591347"
            },
            {
              "criteria": "cpe:2.3:h:unisoc:t610:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "CDC980D6-B797-4AE1-B553-35395AE80D07"
            },
            {
              "criteria": "cpe:2.3:h:unisoc:t612:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "98408A48-561A-49D1-967F-834311742B7F"
            },
            {
              "criteria": "cpe:2.3:h:unisoc:t616:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "756E5850-CDC7-46C2-BAFC-1E2A359A2709"
            },
            {
              "criteria": "cpe:2.3:h:unisoc:t618:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "39002ECE-636A-4FEB-9A0B-8127E8AAC844"
            },
            {
              "criteria": "cpe:2.3:h:unisoc:t760:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "3D965CCA-C963-49E4-ACF0-2A9F458AF470"
            },
            {
              "criteria": "cpe:2.3:h:unisoc:t770:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "0FFEF06A-E3E0-486F-89CC-D52FF3F26F0B"
            },
            {
              "criteria": "cpe:2.3:h:unisoc:t820:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "49601008-D3FF-47CC-B961-6FDDFC7A0596"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "security@unisoc.com"
}