Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2023-38412 State: PUBLISHED Published: 2023-08-07T00:00:00 Last Updated: 2024-10-11T14:11:18.446Z Vendors: n/a Products: n/a Problem Types: n/a Description: Netgear R6900P v1.3.3.154 was discovered to contain multiple buffer overflows via the wla_ssid and wlg_ssid parameters at ia_ap_setting.cgi. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.netgear.com/about/security/ - https://github.com/FirmRec/IoT-Vulns/blob/main/netgear/nvram_ssid/README.md
CVE ID: CVE-2023-38417 State: PUBLISHED Published: 2024-05-16T20:47:16.918Z Last Updated: 2024-08-02T17:39:13.440Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: n/a Products: Intel(R) PROSet/Wireless WiFi software Problem Types: denial of service, CWE-20 Description: Improper input validation for some Intel(R) PROSet/Wireless WiFi software before version 23.20 may allow an unauthenticated user to potentially enable denial of service via adjacent access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01039.html
CVE ID: CVE-2023-38418 State: PUBLISHED Published: 2023-08-02T15:55:17.276Z Last Updated: 2024-10-17T18:47:23.451Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: F5 Products: BIG-IP Edge Client Problem Types: CWE-347 Description: The BIG-IP Edge Client Installer on macOS does not follow best practices for elevating privileges during the installation process. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://my.f5.com/manage/s/article/K000134746
CVE ID: CVE-2023-38419 State: PUBLISHED Published: 2023-08-02T15:55:27.442Z Last Updated: 2024-10-11T14:10:01.507Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: F5 Products: BIG-IP, BIG-IQ Problem Types: CWE-755 Description: An authenticated attacker with guest privileges or higher can cause the iControl SOAP process to terminate by sending undisclosed requests. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://my.f5.com/manage/s/article/K000133472
CVE ID: CVE-2023-38420 State: PUBLISHED Published: 2024-05-16T20:47:23.953Z Last Updated: 2024-08-02T17:39:13.627Z Severity: LOW (CVSS 3.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N) Vendors: n/a Products: Intel(R) Power Gadget software for macOS Problem Types: information disclosure, CWE-754 Description: Improper conditions check in Intel(R) Power Gadget software for macOS all versions may allow an authenticated user to potentially enable information disclosure via local access. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-01037.html
CVE ID: CVE-2023-38421 State: PUBLISHED Published: 2023-07-27T00:30:33.653Z Last Updated: 2024-10-22T20:39:46.269Z Vendors: Apple Products: macOS Problem Types: Processing a 3D model may result in disclosure of process memory Description: The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.5, macOS Monterey 12.6.8. Processing a 3D model may result in disclosure of process memory. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213843 - https://support.apple.com/en-us/HT213844
CVE ID: CVE-2023-38422 State: PUBLISHED Published: 2023-08-23T21:21:07.642Z Last Updated: 2024-10-03T13:40:49.576Z Severity: HIGH (CVSS 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Walchem Products: Intuition 9 Problem Types: CWE-306 Description: Walchem Intuition 9 firmware versions prior to v4.21 are missing authentication for some of the API routes of the management web server. This could allow an attacker to download and export sensitive data. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.cisa.gov/news-events/ics-advisories/icsa-23-229-04
CVE ID: CVE-2023-38423 State: PUBLISHED Published: 2023-08-02T15:55:35.599Z Last Updated: 2024-09-27T21:57:58.771Z Severity: MEDIUM (CVSS 5.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N) Vendors: F5 Products: BIG-IP Problem Types: CWE-79 Description: A cross-site scripting (XSS) vulnerability exists in an undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the currently logged-in user. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://my.f5.com/manage/s/article/K000134535
CVE ID: CVE-2023-38424 State: PUBLISHED Published: 2023-07-27T00:31:40.481Z Last Updated: 2024-10-23T13:42:12.832Z Vendors: Apple Products: iOS and iPadOS, macOS Problem Types: An app may be able to execute arbitrary code with kernel privileges Description: The issue was addressed with improved memory handling. This issue is fixed in iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. An app may be able to execute arbitrary code with kernel privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213841 - https://support.apple.com/en-us/HT213843
CVE ID: CVE-2023-38425 State: PUBLISHED Published: 2023-07-27T00:31:19.027Z Last Updated: 2024-10-22T20:33:31.301Z Vendors: Apple Products: iOS and iPadOS, macOS Problem Types: An app may be able to execute arbitrary code with kernel privileges Description: The issue was addressed with improved memory handling. This issue is fixed in iOS 16.6 and iPadOS 16.6, macOS Ventura 13.5. An app may be able to execute arbitrary code with kernel privileges. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://support.apple.com/en-us/HT213841 - https://support.apple.com/en-us/HT213843
CVE ID: CVE-2023-38426 State: PUBLISHED Published: 2023-07-17T00:00:00 Last Updated: 2024-08-02T17:39:13.425Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 6.3.4. ksmbd has an out-of-bounds read in smb2_find_context_vals when create_context's name_len is larger than the tag length. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.3.4 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/fs/ksmbd?id=02f76c401d17e409ed45bf7887148fcc22c93c85 - https://security.netapp.com/advisory/ntap-20230915-0010/
CVE ID: CVE-2023-38427 State: PUBLISHED Published: 2023-07-17T00:00:00.000Z Last Updated: 2025-05-05T15:56:29.978Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 6.3.8. fs/smb/server/smb2pdu.c in ksmbd has an integer underflow and out-of-bounds read in deassemble_neg_contexts. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/fs/smb/server?id=f1a411873c85b642f13b01f21b534c2bab81fc1b - https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.3.8 - https://security.netapp.com/advisory/ntap-20230824-0011/
CVE ID: CVE-2023-38428 State: PUBLISHED Published: 2023-07-17T00:00:00 Last Updated: 2024-10-15T18:33:28.765Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 6.3.4. fs/ksmbd/smb2pdu.c in ksmbd does not properly check the UserName value because it does not consider the address of security buffer, leading to an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.3.4 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/fs/ksmbd?id=f0a96d1aafd8964e1f9955c830a3e5cb3c60a90f - https://security.netapp.c
ux/kernel/git/torvalds/linux.git/commit/fs/ksmbd?id=f0a96d1aafd8964e1f9955c830a3e5cb3c60a90f - https://security.netapp.com/advisory/ntap-20230831-0001/
CVE ID: CVE-2023-38429 State: PUBLISHED Published: 2023-07-17T00:00:00 Last Updated: 2025-01-03T12:04:21.494Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 6.3.4. fs/ksmbd/connection.c in ksmbd has an off-by-one error in memory allocation (because of ksmbd_smb2_check_message) that may lead to out-of-bounds access. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.3.4 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/fs/ksmbd?id=443d61d1fa9faa60ef925513d83742902390100f
CVE ID: CVE-2023-38430 State: PUBLISHED Published: 2023-07-17T00:00:00 Last Updated: 2024-08-02T17:39:13.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 6.3.9. ksmbd does not validate the SMB request protocol ID, leading to an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/fs/smb/server?id=1c1bcf2d3ea061613119b534f57507c377df20f9 - https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.3.9 - https://security.netapp.com/advisory/ntap-20230831-0003/
CVE ID: CVE-2023-38431 State: PUBLISHED Published: 2023-07-17T00:00:00 Last Updated: 2024-08-02T17:39:13.538Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 6.3.8. fs/smb/server/connection.c in ksmbd does not validate the relationship between the NetBIOS header's length field and the SMB header sizes, via pdu_size in ksmbd_conn_handler_loop, leading to an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.3.8 - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/fs/smb/server?id=368ba06881c395f1c9a7ba22203cf8d78b4addc0
.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/fs/smb/server?id=368ba06881c395f1c9a7ba22203cf8d78b4addc0 - https://security.netapp.com/advisory/ntap-20230824-0011/
CVE ID: CVE-2023-38432 State: PUBLISHED Published: 2023-07-17T00:00:00 Last Updated: 2024-08-02T17:39:13.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in the Linux kernel before 6.3.10. fs/smb/server/smb2misc.c in ksmbd does not validate the relationship between the command payload size and the RFC1002 length specification, leading to an out-of-bounds read. Additional Analyst Notes: - CVE Program Container: References: - https://git.kernel.org/pub/scm/linux/kernel/git/torvalds/linux.git/commit/fs/smb/server?id=2b9b8f3b68edb3d67d79962f02e26dbb5ae3808d - https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.3.10 - https://security.netapp.com/advisor
2f02e26dbb5ae3808d - https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.3.10 - https://security.netapp.com/advisory/ntap-20230831-0002/
CVE ID: CVE-2023-38433 State: PUBLISHED Published: 2023-07-26T07:44:04.302Z Last Updated: 2024-10-23T14:50:47.908Z Vendors: Fujitsu Limited Products: IP-HE950E, IP-HE950D, IP-HE900E, IP-HE900D, IP-900E / IP-920E, IP-900D / IP-900ⅡD / IP-920D, IP-90, IP-9610 Problem Types: Use of Hard-coded Credentials Description: Fujitsu Real-time Video Transmission Gear "IP series" use hard-coded credentials, which may allow a remote unauthenticated attacker to initialize or reboot the products, and as a result, terminate the video transmission. Affected products and versions are as follows: IP-HE950E firmware versions V01L001 to V01L053, IP-HE950D firmware versions V01L001 to V01L053, IP-HE900E firmware v
ws: IP-HE950E firmware versions V01L001 to V01L053, IP-HE950D firmware versions V01L001 to V01L053, IP-HE900E firmware versions V01L001 to V01L010, IP-HE900D firmware versions V01L001 to V01L004, IP-900E / IP-920E firmware versions V01L001 to V02L061, IP-900D / IP-900ⅡD / IP-920D firmware versions V01L001 to V02L061, IP-90 firmware versions V01L001 to V01L013, and IP-9610 firmware versions V01L001 to V02L007. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.fujitsu.com/global/products/computing/peripheral/video/download/ - https://jvn.jp/en/jp/JVN95727578/
CVE ID: CVE-2023-38434 State: PUBLISHED Published: 2023-07-18T00:00:00 Last Updated: 2024-10-28T15:39:12.675Z Vendors: n/a Products: n/a Problem Types: n/a Description: xHTTP 72f812d has a double free in close_connection in xhttp.c via a malformed HTTP request method. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/cozis/xHTTP/issues/1
CVE ID: CVE-2023-38435 State: PUBLISHED Published: 2023-07-25T15:40:05.363Z Last Updated: 2025-02-13T17:01:51.002Z Vendors: Apache Software Foundation Products: Apache Felix Healthcheck Webconsole Plugin Problem Types: CWE-79 Description: An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability in Apache Felix Healthcheck Webconsole Plugin version 2.0.2 and prior may allow an attacker to perform a reflected cross-site scripting (XSS) attack. Upgrade to Apache Felix Healthcheck Webconsole Plugin 2.1.0 or higher. Additional Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/r3blhp3onr4rdbkgdyglqnccg0v79pfv
l Analyst Notes: - CVE Program Container: References: - https://lists.apache.org/thread/r3blhp3onr4rdbkgdyglqnccg0v79pfv - http://seclists.org/fulldisclosure/2023/Jul/43 - http://www.openwall.com/lists/oss-security/2023/07/25/10
CVE ID: CVE-2023-38436 State: PUBLISHED Published: 2023-09-04T01:16:01.826Z Last Updated: 2024-10-02T14:46:21.163Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618 Description: In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1698296481653522434
CVE ID: CVE-2023-38437 State: PUBLISHED Published: 2023-09-04T01:16:02.104Z Last Updated: 2024-10-02T14:45:31.612Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618 Description: In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1698296481653522434
CVE ID: CVE-2023-38438 State: PUBLISHED Published: 2023-09-04T01:16:02.381Z Last Updated: 2024-10-02T14:43:35.807Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618 Description: In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1698296481653522434
CVE ID: CVE-2023-38439 State: PUBLISHED Published: 2023-09-04T01:16:02.676Z Last Updated: 2024-10-02T14:42:40.084Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9832E/SC9863A/T606/T612/T616/T610/T618 Description: In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1698296481653522434
CVE ID: CVE-2023-38440 State: PUBLISHED Published: 2023-09-04T01:16:02.966Z Last Updated: 2024-10-02T14:41:42.799Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618 Description: In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1698296481653522434
CVE ID: CVE-2023-38441 State: PUBLISHED Published: 2023-09-04T01:16:03.270Z Last Updated: 2024-10-02T14:40:46.057Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618 Description: In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1698296481653522434
CVE ID: CVE-2023-38442 State: PUBLISHED Published: 2023-09-04T01:16:03.572Z Last Updated: 2024-10-02T14:44:34.698Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618 Description: In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution privileges Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1698296481653522434
CVE ID: CVE-2023-38443 State: PUBLISHED Published: 2023-09-04T01:16:03.873Z Last Updated: 2024-10-11T16:46:15.394Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618 Description: In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1698296481653522434
CVE ID: CVE-2023-38444 State: PUBLISHED Published: 2023-09-04T01:16:04.144Z Last Updated: 2024-10-11T16:38:37.275Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618 Description: In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1698296481653522434
CVE ID: CVE-2023-38445 State: PUBLISHED Published: 2023-09-04T01:16:04.417Z Last Updated: 2024-10-10T15:42:46.885Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618 Description: In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution privileges Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1698296481653522434
CVE ID: CVE-2023-38446 State: PUBLISHED Published: 2023-09-04T01:16:04.688Z Last Updated: 2024-10-10T14:08:38.416Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618 Description: In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution privileges Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1698296481653522434
CVE ID: CVE-2023-38447 State: PUBLISHED Published: 2023-09-04T01:16:04.962Z Last Updated: 2024-10-10T14:08:07.799Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618 Description: In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution privileges Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1698296481653522434
CVE ID: CVE-2023-38448 State: PUBLISHED Published: 2023-09-04T01:16:05.233Z Last Updated: 2024-10-02T14:38:36.019Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618 Description: In vowifiservice, there is a possible missing permission check.This could lead to local denial of service with no additional execution privileges Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1698296481653522434
CVE ID: CVE-2023-38449 State: PUBLISHED Published: 2023-09-04T01:16:05.502Z Last Updated: 2024-10-11T16:31:28.738Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618 Description: In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1698296481653522434
CVE ID: CVE-2023-38450 State: PUBLISHED Published: 2023-09-04T01:16:05.855Z Last Updated: 2024-10-11T16:24:34.052Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC9832E/SC9863A/T606/T612/T616/T610/T618 Description: In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1698296481653522434
CVE ID: CVE-2023-38451 State: PUBLISHED Published: 2023-09-04T01:16:06.158Z Last Updated: 2024-10-11T16:19:02.270Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618 Description: In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1698296481653522434
CVE ID: CVE-2023-38452 State: PUBLISHED Published: 2023-09-04T01:16:06.450Z Last Updated: 2024-10-11T16:12:37.429Z Vendors: Unisoc (Shanghai) Technologies Co., Ltd. Products: SC7731E/SC9832E/SC9863A/T606/T612/T616/T610/T618 Description: In vowifiservice, there is a possible missing permission check.This could lead to local escalation of privilege with no additional execution privileges Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1698296481653522434