CVE-2022-48440

EPSS 0.02%
Veröffentlicht 06.06.2023 06:15:50
Zuletzt bearbeitet 07.01.2025 21:15:09
Quelle security@unisoc.com
CVE-Watchlists
Login
Unerledigt
Login

In dialer service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 2 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Google ≫ Android Version10.0

   Unisoc ≫ S8000 Version-
   Unisoc ≫ Sc7731e Version-
   Unisoc ≫ Sc9832e Version-
   Unisoc ≫ Sc9863a Version-
   Unisoc ≫ T310 Version-
   Unisoc ≫ T606 Version-
   Unisoc ≫ T610 Version-
   Unisoc ≫ T612 Version-
   Unisoc ≫ T616 Version-
   Unisoc ≫ T618 Version-
   Unisoc ≫ T760 Version-
   Unisoc ≫ T770 Version-
   Unisoc ≫ T820 Version-

Google ≫ Android Version11.0

Google ≫ Android Version12.0

Google ≫ Android Version13.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.02%	0.056

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5.5	1.8	3.6	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
134c704f-9b21-4f2e-91b3-4a467353bcc0	6.2	1.4	4.7	CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

CWE-770 Allocation of Resources Without Limits or Throttling

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

CWE-862 Missing Authorization

The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

https://www.unisoc.com/en_us/secy/announcementDetail/1664822361414762498

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2022-48440

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2022-48440

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2022-48440

EUVD