CVE-2023-33911
CVSS 3.1 Score 5.5 of 10 (medium)
Attack Complexity low
Confidentiality high
Privileges Required low
Integrity none
Availability none
Scope unchanged
Details
Published Aug 7, 2023
Updated: Aug 10, 2023
CWE ID 862
Summary
CVE-2023-33911 is a vulnerability affecting the vowifi service. The issue involves a missing permission check, which could potentially allow an attacker to disclose local information without requiring any additional execution privileges. This vulnerability poses a risk to the confidentiality of data handled by the affected service. Organizations using vowifi are advised to apply the necessary patches or mitigations to protect against this information disclosure threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Products
- Android