CVE-2023-41820
Assigner: lenovo
Published: 2024-05-03T14:04:16.223Z
State: PUBLISHED
affected: defaultStatus: unaffected
product: Phones
vendor: Motorola
versions: lessThan: 2023-09-01
status: affected
version:  
versionType: SPL
credits: type: finder
value: Sergey Toshin and Illia Khorolskyi of Oversecured (ovesecured.com) 
descriptions: supportingMedia: base64: no
type: text/html
value: 

<span style="background-color: rgb(255, 255, 255);">An implicit intent vulnerability was reported in the Motorola Ready For application that could allow a local attacker to read information about connected Bluetooth audio devices.</span><span style="background-color: rgb(255, 255, 255);">&nbsp;</span>


value: 
An implicit intent vulnerability was reported in the Motorola Ready For application that could allow a local attacker to read information about connected Bluetooth audio devices. 


metrics: cvssV3_1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 5
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N
version: 3.1
format: CVSS
scenarios: value: GENERAL
problemTypes: descriptions: cweId: CWE-927
description: CWE-927: Use of Implicit Intent for Sensitive Communication
type: CWE
solutions: supportingMedia: base64: no
type: text/html
value: 

<span style="background-color: rgb(255, 255, 255);">Update your Motorola phone to the latest software version. Software versions with a Security Patch Level of 2023-09-01 or later include a fix for this vulnerability.</span><br>
value: 
Update your Motorola phone to the latest software version. Software versions with a Security Patch Level of 2023-09-01 or later include a fix for this vulnerability.

source: discovery: UNKNOWN
x_generator: engine: Vulnogram 0.1.0-dev