CVE-2023-38436

CVSS 3.1 Score 5.5 of 10 (medium)

Details

Published Sep 4, 2023
Updated: Sep 7, 2023
CWE ID 862

Summary

CVE-2023-38436: A vulnerability was identified in the vowifiservice component. This issue involves a missing permission check, resulting in potential local information disclosure without the need for any additional execution privileges. This could pose a risk to system security and confidentiality. Organizations using this software are advised to apply the necessary patches or workarounds to mitigate this vulnerability.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share