CVE-2023-41816
Assigner: lenovo
Published: 2024-05-03T14:02:07.034Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: Phones
vendor: Motorola
versions: lessThan: 2023-12-01
status: affected
version:  
versionType: SPL
credits: type: finder
value: Sergey Toshin and Illia Khorolskyi of Oversecured (ovesecured.com) 
descriptions: supportingMedia: base64: no
type: text/html
value: 

<span style="background-color: rgb(255, 255, 255);">An improper export vulnerability was reported in the Motorola Services Main application that could allow a local attacker to write to a local database.</span><span style="background-color: rgb(255, 255, 255);">&nbsp;</span>


value: 
An improper export vulnerability was reported in the Motorola Services Main application that could allow a local attacker to write to a local database. 


metrics: cvssV3_1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 5
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: HIGH
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:N
version: 3.1
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: cweId: CWE-926
description: CWE-926: Improper Export of Android Application Components 
type: CWE
solutions: supportingMedia: base64: no
type: text/html
value: 

<span style="background-color: rgb(255, 255, 255);">Update your Motorola phone to the latest software version. Software versions with a Security Patch Level of 2023-12-01 or later include a fix for this vulnerability.</span><span style="background-color: rgb(255, 255, 255);">&nbsp;</span>

<br>
value: 
Update your Motorola phone to the latest software version. Software versions with a Security Patch Level of 2023-12-01 or later include a fix for this vulnerability. 



source: discovery: UNKNOWN
x_generator: engine: Vulnogram 0.1.0-dev