CVE-2023-40635 - Vulnerability Details - OpenCVE

In linkturbo, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed

No CVSS v4.0

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00027.

Exploitation none

Automatable no

Technical Impact total

Vendors	Products
Google	Android
Unisoc	S8000 Sc9863a T606 T610 T612 T616 T618 T760 T770 T820

Configuration 1 [-]

AND

cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*

OR	cpe:2.3:h:unisoc:s8000:-:::::::*
	cpe:2.3:h:unisoc:sc9863a:-:::::::*
	cpe:2.3:h:unisoc:t606:-:::::::*
	cpe:2.3:h:unisoc:t610:-:::::::*
	cpe:2.3:h:unisoc:t612:-:::::::*
	cpe:2.3:h:unisoc:t616:-:::::::*
	cpe:2.3:h:unisoc:t618:-:::::::*
	cpe:2.3:h:unisoc:t760:-:::::::*
	cpe:2.3:h:unisoc:t770:-:::::::*
	cpe:2.3:h:unisoc:t820:-:::::::*

No data.

No data.

Advisories

Source	ID	Title
EUVD	EUVD-2023-45191	In linkturbo, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1707266966118531074

History

Thu, 19 Sep 2024 16:30:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

MITRE

Status: PUBLISHED

Assigner: Unisoc

Published: 2023-10-08T03:35:59.024Z

Updated: 2024-09-19T15:26:51.868Z

Reserved: 2023-08-18T02:28:08.631Z

Link: CVE-2023-40635

Vulnrichment

Updated: 2024-08-02T18:38:51.096Z

NVD

Status : Modified

Published: 2023-10-08T04:15:56.630

Modified: 2024-11-21T08:19:52.193

Link: CVE-2023-40635

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-40635", "assignerOrgId": "63f92e9c-2193-4c24-98a9-93640392c3d3", "state": "PUBLISHED", "assignerShortName": "Unisoc", "dateReserved": "2023-08-18T02:28:08.631Z", "datePublished": "2023-10-08T03:35:59.024Z", "dateUpdated": "2024-09-19T15:26:51.868Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "63f92e9c-2193-4c24-98a9-93640392c3d3", "shortName": "Unisoc", "dateUpdated": "2023-10-08T03:35:59.024Z"}, "references": [{"url": "https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1707266966118531074"}], "affected": [{"defaultStatus": "unaffected", "product": "SC9863A/T606/T612/T616/T610/T618/T760/T770/T820/S8000", "versions": [{"version": "Android11", "status": "affected"}], "vendor": "Unisoc (Shanghai) Technologies Co., Ltd."}], "descriptions": [{"lang": "en", "value": "In linkturbo, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed"}]}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T18:38:51.096Z"}, "title": "CVE Program Container", "references": [{"url": "https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1707266966118531074", "tags": ["x_transferred"]}]}, {"affected": [{"vendor": "unisoc", "product": "sc9863a", "cpes": ["cpe:2.3:h:unisoc:sc9863a:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "android11", "status": "affected"}]}, {"vendor": "unisoc", "product": "t606", "cpes": ["cpe:2.3:h:unisoc:t606:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "android11", "status": "affected"}]}, {"vendor": "unisoc", "product": "t612", "cpes": ["cpe:2.3:h:unisoc:t612:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "android11", "status": "affected"}]}, {"vendor": "unisoc", "product": "t616", "cpes": ["cpe:2.3:h:unisoc:t616:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "android11", "status": "affected"}]}, {"vendor": "unisoc", "product": "t610", "cpes": ["cpe:2.3:h:unisoc:t610:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "android11", "status": "affected"}]}, {"vendor": "unisoc", "product": "t618", "cpes": ["cpe:2.3:h:unisoc:t618:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "android11", "status": "affected"}]}, {"vendor": "unisoc", "product": "t760", "cpes": ["cpe:2.3:h:unisoc:t760:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "android11", "status": "affected"}]}, {"vendor": "unisoc", "product": "t770", "cpes": ["cpe:2.3:h:unisoc:t770:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "android11", "status": "affected"}]}, {"vendor": "unisoc", "product": "t820", "cpes": ["cpe:2.3:h:unisoc:t820:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "android11", "status": "affected"}]}, {"vendor": "unisoc", "product": "s8000", "cpes": ["cpe:2.3:h:unisoc:s8000:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "android11", "status": "affected"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-09-19T15:12:58.385829Z", "id": "CVE-2023-40635", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-19T15:26:51.868Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1707266966118531074", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T18:38:51.096Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-40635", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-09-19T15:12:58.385829Z"}}}], "affected": [{"cpes": ["cpe:2.3:h:unisoc:sc9863a:-:*:*:*:*:*:*:*"], "vendor": "unisoc", "product": "sc9863a", "versions": [{"status": "affected", "version": "android11"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:unisoc:t606:-:*:*:*:*:*:*:*"], "vendor": "unisoc", "product": "t606", "versions": [{"status": "affected", "version": "android11"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:unisoc:t612:-:*:*:*:*:*:*:*"], "vendor": "unisoc", "product": "t612", "versions": [{"status": "affected", "version": "android11"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:unisoc:t616:-:*:*:*:*:*:*:*"], "vendor": "unisoc", "product": "t616", "versions": [{"status": "affected", "version": "android11"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:unisoc:t610:-:*:*:*:*:*:*:*"], "vendor": "unisoc", "product": "t610", "versions": [{"status": "affected", "version": "android11"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:unisoc:t618:-:*:*:*:*:*:*:*"], "vendor": "unisoc", "product": "t618", "versions": [{"status": "affected", "version": "android11"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:unisoc:t760:-:*:*:*:*:*:*:*"], "vendor": "unisoc", "product": "t760", "versions": [{"status": "affected", "version": "android11"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:unisoc:t770:-:*:*:*:*:*:*:*"], "vendor": "unisoc", "product": "t770", "versions": [{"status": "affected", "version": "android11"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:unisoc:t820:-:*:*:*:*:*:*:*"], "vendor": "unisoc", "product": "t820", "versions": [{"status": "affected", "version": "android11"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:unisoc:s8000:-:*:*:*:*:*:*:*"], "vendor": "unisoc", "product": "s8000", "versions": [{"status": "affected", "version": "android11"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-09-19T15:16:59.371Z"}}], "cna": {"affected": [{"vendor": "Unisoc (Shanghai) Technologies Co., Ltd.", "product": "SC9863A/T606/T612/T616/T610/T618/T760/T770/T820/S8000", "versions": [{"status": "affected", "version": "Android11"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1707266966118531074"}], "descriptions": [{"lang": "en", "value": "In linkturbo, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed"}], "providerMetadata": {"orgId": "63f92e9c-2193-4c24-98a9-93640392c3d3", "shortName": "Unisoc", "dateUpdated": "2023-10-08T03:35:59.024Z"}}}, "cveMetadata": {"cveId": "CVE-2023-40635", "state": "PUBLISHED", "dateUpdated": "2024-09-19T15:26:51.868Z", "dateReserved": "2023-08-18T02:28:08.631Z", "assignerOrgId": "63f92e9c-2193-4c24-98a9-93640392c3d3", "datePublished": "2023-10-08T03:35:59.024Z", "assignerShortName": "Unisoc"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*", "matchCriteriaId": "109DD7FD-3A48-4C3D-8E1A-4433B98E1E64", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:unisoc:s8000:-:*:*:*:*:*:*:*", "matchCriteriaId": "FDE05D06-C798-4217-8858-8C5DC2C94751", "vulnerable": false}, {"criteria": "cpe:2.3:h:unisoc:sc9863a:-:*:*:*:*:*:*:*", "matchCriteriaId": "DE00DFDE-97DD-4D33-B580-73FEF677C71B", "vulnerable": false}, {"criteria": "cpe:2.3:h:unisoc:t606:-:*:*:*:*:*:*:*", "matchCriteriaId": "905E39DD-7948-40A4-B042-EBB9A9591347", "vulnerable": false}, {"criteria": "cpe:2.3:h:unisoc:t610:-:*:*:*:*:*:*:*", "matchCriteriaId": "CDC980D6-B797-4AE1-B553-35395AE80D07", "vulnerable": false}, {"criteria": "cpe:2.3:h:unisoc:t612:-:*:*:*:*:*:*:*", "matchCriteriaId": "98408A48-561A-49D1-967F-834311742B7F", "vulnerable": false}, {"criteria": "cpe:2.3:h:unisoc:t616:-:*:*:*:*:*:*:*", "matchCriteriaId": "756E5850-CDC7-46C2-BAFC-1E2A359A2709", "vulnerable": false}, {"criteria": "cpe:2.3:h:unisoc:t618:-:*:*:*:*:*:*:*", "matchCriteriaId": "39002ECE-636A-4FEB-9A0B-8127E8AAC844", "vulnerable": false}, {"criteria": "cpe:2.3:h:unisoc:t760:-:*:*:*:*:*:*:*", "matchCriteriaId": "3D965CCA-C963-49E4-ACF0-2A9F458AF470", "vulnerable": false}, {"criteria": "cpe:2.3:h:unisoc:t770:-:*:*:*:*:*:*:*", "matchCriteriaId": "0FFEF06A-E3E0-486F-89CC-D52FF3F26F0B", "vulnerable": false}, {"criteria": "cpe:2.3:h:unisoc:t820:-:*:*:*:*:*:*:*", "matchCriteriaId": "49601008-D3FF-47CC-B961-6FDDFC7A0596", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "In linkturbo, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed"}, {"lang": "es", "value": "En linkturbo, es posible que falte una verificaci\u00f3n de permiso. Esto podr\u00eda conducir a una escalada local de privilegios sin necesidad de privilegios de ejecuci\u00f3n adicionales."}], "id": "CVE-2023-40635", "lastModified": "2024-11-21T08:19:52.193", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2023-10-08T04:15:56.630", "references": [{"source": "security@unisoc.com", "tags": ["Vendor Advisory"], "url": "https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1707266966118531074"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://www.unisoc.com/en_us/secy/announcementDetail/https://www.unisoc.com/en_us/secy/announcementDetail/1707266966118531074"}], "sourceIdentifier": "security@unisoc.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-862"}], "source": "nvd@nist.gov", "type": "Primary"}]}