CVE-2024-39438 - Vulnerability Details

Vendors	Products
Google	Android
Unisoc	S8000 Sc7731e Sc9832e Sc9863a T310 T606 T610 T612 T616 T618 T760 T770 T820

Link	Providers
https://www.unisoc.com/en_us/secy/announcementDetail/1843898270204624897

Type	Values Removed	Values Added
First Time appeared		Google Google android
Weaknesses		CWE-77
CPEs		cpe:2.3:o:google:android:13.0:::::::* cpe:2.3:o:google:android:14.0:::::::*
Vendors & Products		Google Google android

Type	Values Removed	Values Added
First Time appeared		Unisoc Unisoc s8000 Unisoc sc7731e Unisoc sc9832e Unisoc sc9863a Unisoc t310 Unisoc t606 Unisoc t610 Unisoc t612 Unisoc t616 Unisoc t618 Unisoc t760 Unisoc t770 Unisoc t820
CPEs		cpe:2.3:h:unisoc:s8000:-:::::::* cpe:2.3:h:unisoc:sc7731e:-:::::::* cpe:2.3:h:unisoc:sc9832e:-:::::::* cpe:2.3:h:unisoc:sc9863a:-:::::::* cpe:2.3:h:unisoc:t310:-:::::::* cpe:2.3:h:unisoc:t606:-:::::::* cpe:2.3:h:unisoc:t610:-:::::::* cpe:2.3:h:unisoc:t612:-:::::::* cpe:2.3:h:unisoc:t616:-:::::::* cpe:2.3:h:unisoc:t618:-:::::::* cpe:2.3:h:unisoc:t760:-:::::::* cpe:2.3:h:unisoc:t770:-:::::::* cpe:2.3:h:unisoc:t820:-:::::::*
Vendors & Products		Unisoc Unisoc s8000 Unisoc sc7731e Unisoc sc9832e Unisoc sc9863a Unisoc t310 Unisoc t606 Unisoc t610 Unisoc t612 Unisoc t616 Unisoc t618 Unisoc t760 Unisoc t770 Unisoc t820
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Type	Values Removed	Values Added
Description		In linkturbonative service, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed.
References		https://www.unisoc.com/en_us/secy/announcementDetail/1843898270204624897
Metrics		cvssV3_1 `{'score': 6.5, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H'}`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-39438", "assignerOrgId": "63f92e9c-2193-4c24-98a9-93640392c3d3", "state": "PUBLISHED", "assignerShortName": "Unisoc", "dateReserved": "2024-06-25T06:13:32.360Z", "datePublished": "2024-10-09T06:43:29.015Z", "dateUpdated": "2024-10-09T18:52:15.994Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "63f92e9c-2193-4c24-98a9-93640392c3d3", "shortName": "Unisoc", "dateUpdated": "2024-10-09T06:43:29.015Z"}, "affected": [{"vendor": "Unisoc (Shanghai) Technologies Co., Ltd.", "product": "SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000", "versions": [{"status": "affected", "version": "Android13/Android14"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "In linkturbonative service, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed."}], "references": [{"url": "https://www.unisoc.com/en_us/secy/announcementDetail/1843898270204624897"}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H"}}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "cwe-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')", "type": "CWE"}]}]}, "adp": [{"affected": [{"vendor": "unisoc", "product": "sc7731e", "cpes": ["cpe:2.3:h:unisoc:sc7731e:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "android13", "status": "affected"}, {"version": "android14", "status": "affected"}]}, {"vendor": "unisoc", "product": "sc9832e", "cpes": ["cpe:2.3:h:unisoc:sc9832e:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "android13", "status": "affected"}, {"version": "android14", "status": "affected"}]}, {"vendor": "unisoc", "product": "sc9863a", "cpes": ["cpe:2.3:h:unisoc:sc9863a:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "android13", "status": "affected"}, {"version": "android14", "status": "affected"}]}, {"vendor": "unisoc", "product": "t310", "cpes": ["cpe:2.3:h:unisoc:t310:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "android13", "status": "affected"}, {"version": "android14", "status": "affected"}]}, {"vendor": "unisoc", "product": "t606", "cpes": ["cpe:2.3:h:unisoc:t606:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "android13", "status": "affected"}, {"version": "android14", "status": "affected"}]}, {"vendor": "unisoc", "product": "t612", "cpes": ["cpe:2.3:h:unisoc:t612:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "android13", "status": "affected"}, {"version": "android14", "status": "affected"}]}, {"vendor": "unisoc", "product": "t616", "cpes": ["cpe:2.3:h:unisoc:t616:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "android13", "status": "affected"}, {"version": "android14", "status": "affected"}]}, {"vendor": "unisoc", "product": "t610", "cpes": ["cpe:2.3:h:unisoc:t610:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "android13", "status": "affected"}, {"version": "android14", "status": "affected"}]}, {"vendor": "unisoc", "product": "t618", "cpes": ["cpe:2.3:h:unisoc:t618:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "android13", "status": "affected"}, {"version": "android14", "status": "affected"}]}, {"vendor": "unisoc", "product": "t760", "cpes": ["cpe:2.3:h:unisoc:t760:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "android13", "status": "affected"}, {"version": "android14", "status": "affected"}]}, {"vendor": "unisoc", "product": "t770", "cpes": ["cpe:2.3:h:unisoc:t770:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "android13", "status": "affected"}, {"version": "android14", "status": "affected"}]}, {"vendor": "unisoc", "product": "t820", "cpes": ["cpe:2.3:h:unisoc:t820:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "android13", "status": "affected"}, {"version": "android14", "status": "affected"}]}, {"vendor": "unisoc", "product": "s8000", "cpes": ["cpe:2.3:h:unisoc:s8000:-:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "android13", "status": "affected"}, {"version": "android14", "status": "affected"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-10-09T18:35:42.803689Z", "id": "CVE-2024-39438", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-09T18:52:15.994Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2024-39438 (string)

assignerOrgId : 63f92e9c-2193-4c24-98a9-93640392c3d3 (string)

state : PUBLISHED (string)

assignerShortName : Unisoc (string)

dateReserved : 2024-06-25T06:13:32.360Z (string)

datePublished : 2024-10-09T06:43:29.015Z (string)

dateUpdated : 2024-10-09T18:52:15.994Z (string)

}

containers : { »

cna : { »

providerMetadata : { »

orgId : 63f92e9c-2193-4c24-98a9-93640392c3d3 (string)

shortName : Unisoc (string)

dateUpdated : 2024-10-09T06:43:29.015Z (string)

}

affected : [ »

0 : { »

vendor : Unisoc (Shanghai) Technologies Co., Ltd. (string)

product : SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 (string)

versions : [ »

0 : { »

status : affected (string)

version : Android13/Android14 (string)

}

]

defaultStatus : unaffected (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : In linkturbonative service, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. (string)

}

]

references : [ »

0 : { »

url : https://www.unisoc.com/en_us/secy/announcementDetail/1843898270204624897 (string)

}

]

metrics : [ »

0 : { »

format : CVSS (string)

scenarios : [ »

0 : { »

lang : en (string)

value : GENERAL (string)

}

]

cvssV3_1 : { »

version : 3.1 (string)

baseScore : 6.5 (number)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

description : cwe-77 Improper Neutralization of Special Elements used in a Command ('Command Injection') (string)

type : CWE (string)

}

]

}

]

}

adp : [ »

0 : { »

affected : [ »

0 : { »

vendor : unisoc (string)

product : sc7731e (string)

cpes : [ »

0 : cpe:2.3:h:unisoc:sc7731e:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : android13 (string)

status : affected (string)

}

1 : { »

version : android14 (string)

status : affected (string)

}

]

}

1 : { »

vendor : unisoc (string)

product : sc9832e (string)

cpes : [ »

0 : cpe:2.3:h:unisoc:sc9832e:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : android13 (string)

status : affected (string)

}

1 : { »

version : android14 (string)

status : affected (string)

}

]

}

2 : { »

vendor : unisoc (string)

product : sc9863a (string)

cpes : [ »

0 : cpe:2.3:h:unisoc:sc9863a:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : android13 (string)

status : affected (string)

}

1 : { »

version : android14 (string)

status : affected (string)

}

]

}

3 : { »

vendor : unisoc (string)

product : t310 (string)

cpes : [ »

0 : cpe:2.3:h:unisoc:t310:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : android13 (string)

status : affected (string)

}

1 : { »

version : android14 (string)

status : affected (string)

}

]

}

4 : { »

vendor : unisoc (string)

product : t606 (string)

cpes : [ »

0 : cpe:2.3:h:unisoc:t606:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : android13 (string)

status : affected (string)

}

1 : { »

version : android14 (string)

status : affected (string)

}

]

}

5 : { »

vendor : unisoc (string)

product : t612 (string)

cpes : [ »

0 : cpe:2.3:h:unisoc:t612:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : android13 (string)

status : affected (string)

}

1 : { »

version : android14 (string)

status : affected (string)

}

]

}

6 : { »

vendor : unisoc (string)

product : t616 (string)

cpes : [ »

0 : cpe:2.3:h:unisoc:t616:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : android13 (string)

status : affected (string)

}

1 : { »

version : android14 (string)

status : affected (string)

}

]

}

7 : { »

vendor : unisoc (string)

product : t610 (string)

cpes : [ »

0 : cpe:2.3:h:unisoc:t610:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : android13 (string)

status : affected (string)

}

1 : { »

version : android14 (string)

status : affected (string)

}

]

}

8 : { »

vendor : unisoc (string)

product : t618 (string)

cpes : [ »

0 : cpe:2.3:h:unisoc:t618:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : android13 (string)

status : affected (string)

}

1 : { »

version : android14 (string)

status : affected (string)

}

]

}

9 : { »

vendor : unisoc (string)

product : t760 (string)

cpes : [ »

0 : cpe:2.3:h:unisoc:t760:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : android13 (string)

status : affected (string)

}

1 : { »

version : android14 (string)

status : affected (string)

}

]

}

10 : { »

vendor : unisoc (string)

product : t770 (string)

cpes : [ »

0 : cpe:2.3:h:unisoc:t770:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : android13 (string)

status : affected (string)

}

1 : { »

version : android14 (string)

status : affected (string)

}

]

}

11 : { »

vendor : unisoc (string)

product : t820 (string)

cpes : [ »

0 : cpe:2.3:h:unisoc:t820:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : android13 (string)

status : affected (string)

}

1 : { »

version : android14 (string)

status : affected (string)

}

]

}

12 : { »

vendor : unisoc (string)

product : s8000 (string)

cpes : [ »

0 : cpe:2.3:h:unisoc:s8000:-:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : android13 (string)

status : affected (string)

}

1 : { »

version : android14 (string)

status : affected (string)

}

]

}

]

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2024-10-09T18:35:42.803689Z (string)

id : CVE-2024-39438 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-10-09T18:52:15.994Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-39438", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-10-09T18:35:42.803689Z"}}}], "affected": [{"cpes": ["cpe:2.3:h:unisoc:sc7731e:-:*:*:*:*:*:*:*"], "vendor": "unisoc", "product": "sc7731e", "versions": [{"status": "affected", "version": "android13"}, {"status": "affected", "version": "android14"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:unisoc:sc9832e:-:*:*:*:*:*:*:*"], "vendor": "unisoc", "product": "sc9832e", "versions": [{"status": "affected", "version": "android13"}, {"status": "affected", "version": "android14"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:unisoc:sc9863a:-:*:*:*:*:*:*:*"], "vendor": "unisoc", "product": "sc9863a", "versions": [{"status": "affected", "version": "android13"}, {"status": "affected", "version": "android14"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:unisoc:t310:-:*:*:*:*:*:*:*"], "vendor": "unisoc", "product": "t310", "versions": [{"status": "affected", "version": "android13"}, {"status": "affected", "version": "android14"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:unisoc:t606:-:*:*:*:*:*:*:*"], "vendor": "unisoc", "product": "t606", "versions": [{"status": "affected", "version": "android13"}, {"status": "affected", "version": "android14"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:unisoc:t612:-:*:*:*:*:*:*:*"], "vendor": "unisoc", "product": "t612", "versions": [{"status": "affected", "version": "android13"}, {"status": "affected", "version": "android14"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:unisoc:t616:-:*:*:*:*:*:*:*"], "vendor": "unisoc", "product": "t616", "versions": [{"status": "affected", "version": "android13"}, {"status": "affected", "version": "android14"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:unisoc:t610:-:*:*:*:*:*:*:*"], "vendor": "unisoc", "product": "t610", "versions": [{"status": "affected", "version": "android13"}, {"status": "affected", "version": "android14"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:unisoc:t618:-:*:*:*:*:*:*:*"], "vendor": "unisoc", "product": "t618", "versions": [{"status": "affected", "version": "android13"}, {"status": "affected", "version": "android14"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:unisoc:t760:-:*:*:*:*:*:*:*"], "vendor": "unisoc", "product": "t760", "versions": [{"status": "affected", "version": "android13"}, {"status": "affected", "version": "android14"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:unisoc:t770:-:*:*:*:*:*:*:*"], "vendor": "unisoc", "product": "t770", "versions": [{"status": "affected", "version": "android13"}, {"status": "affected", "version": "android14"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:unisoc:t820:-:*:*:*:*:*:*:*"], "vendor": "unisoc", "product": "t820", "versions": [{"status": "affected", "version": "android13"}, {"status": "affected", "version": "android14"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:unisoc:s8000:-:*:*:*:*:*:*:*"], "vendor": "unisoc", "product": "s8000", "versions": [{"status": "affected", "version": "android13"}, {"status": "affected", "version": "android14"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-09T18:52:08.233Z"}}], "cna": {"metrics": [{"format": "CVSS", "cvssV3_1": {"version": "3.1", "baseScore": 6.5, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Unisoc (Shanghai) Technologies Co., Ltd.", "product": "SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000", "versions": [{"status": "affected", "version": "Android13/Android14"}], "defaultStatus": "unaffected"}], "references": [{"url": "https://www.unisoc.com/en_us/secy/announcementDetail/1843898270204624897"}], "descriptions": [{"lang": "en", "value": "In linkturbonative service, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "description": "cwe-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')"}]}], "providerMetadata": {"orgId": "63f92e9c-2193-4c24-98a9-93640392c3d3", "shortName": "Unisoc", "dateUpdated": "2024-10-09T06:43:29.015Z"}}}, "cveMetadata": {"cveId": "CVE-2024-39438", "state": "PUBLISHED", "dateUpdated": "2024-10-09T18:52:15.994Z", "dateReserved": "2024-06-25T06:13:32.360Z", "assignerOrgId": "63f92e9c-2193-4c24-98a9-93640392c3d3", "datePublished": "2024-10-09T06:43:29.015Z", "assignerShortName": "Unisoc"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2024-39438 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

version : 2.0.3 (string)

timestamp : 2024-10-09T18:35:42.803689Z (string)

}

]

affected : [ »

0 : { »

cpes : [ »

0 : cpe:2.3:h:unisoc:sc7731e:-:*:*:*:*:*:*:* (string)

]

vendor : unisoc (string)

product : sc7731e (string)

versions : [ »

0 : { »

status : affected (string)

version : android13 (string)

}

1 : { »

status : affected (string)

version : android14 (string)

}

]

defaultStatus : unknown (string)

}

1 : { »

cpes : [ »

0 : cpe:2.3:h:unisoc:sc9832e:-:*:*:*:*:*:*:* (string)

]

vendor : unisoc (string)

product : sc9832e (string)

versions : [ »

0 : { »

status : affected (string)

version : android13 (string)

}

1 : { »

status : affected (string)

version : android14 (string)

}

]

defaultStatus : unknown (string)

}

2 : { »

cpes : [ »

0 : cpe:2.3:h:unisoc:sc9863a:-:*:*:*:*:*:*:* (string)

]

vendor : unisoc (string)

product : sc9863a (string)

versions : [ »

0 : { »

status : affected (string)

version : android13 (string)

}

1 : { »

status : affected (string)

version : android14 (string)

}

]

defaultStatus : unknown (string)

}

3 : { »

cpes : [ »

0 : cpe:2.3:h:unisoc:t310:-:*:*:*:*:*:*:* (string)

]

vendor : unisoc (string)

product : t310 (string)

versions : [ »

0 : { »

status : affected (string)

version : android13 (string)

}

1 : { »

status : affected (string)

version : android14 (string)

}

]

defaultStatus : unknown (string)

}

4 : { »

cpes : [ »

0 : cpe:2.3:h:unisoc:t606:-:*:*:*:*:*:*:* (string)

]

vendor : unisoc (string)

product : t606 (string)

versions : [ »

0 : { »

status : affected (string)

version : android13 (string)

}

1 : { »

status : affected (string)

version : android14 (string)

}

]

defaultStatus : unknown (string)

}

5 : { »

cpes : [ »

0 : cpe:2.3:h:unisoc:t612:-:*:*:*:*:*:*:* (string)

]

vendor : unisoc (string)

product : t612 (string)

versions : [ »

0 : { »

status : affected (string)

version : android13 (string)

}

1 : { »

status : affected (string)

version : android14 (string)

}

]

defaultStatus : unknown (string)

}

6 : { »

cpes : [ »

0 : cpe:2.3:h:unisoc:t616:-:*:*:*:*:*:*:* (string)

]

vendor : unisoc (string)

product : t616 (string)

versions : [ »

0 : { »

status : affected (string)

version : android13 (string)

}

1 : { »

status : affected (string)

version : android14 (string)

}

]

defaultStatus : unknown (string)

}

7 : { »

cpes : [ »

0 : cpe:2.3:h:unisoc:t610:-:*:*:*:*:*:*:* (string)

]

vendor : unisoc (string)

product : t610 (string)

versions : [ »

0 : { »

status : affected (string)

version : android13 (string)

}

1 : { »

status : affected (string)

version : android14 (string)

}

]

defaultStatus : unknown (string)

}

8 : { »

cpes : [ »

0 : cpe:2.3:h:unisoc:t618:-:*:*:*:*:*:*:* (string)

]

vendor : unisoc (string)

product : t618 (string)

versions : [ »

0 : { »

status : affected (string)

version : android13 (string)

}

1 : { »

status : affected (string)

version : android14 (string)

}

]

defaultStatus : unknown (string)

}

9 : { »

cpes : [ »

0 : cpe:2.3:h:unisoc:t760:-:*:*:*:*:*:*:* (string)

]

vendor : unisoc (string)

product : t760 (string)

versions : [ »

0 : { »

status : affected (string)

version : android13 (string)

}

1 : { »

status : affected (string)

version : android14 (string)

}

]

defaultStatus : unknown (string)

}

10 : { »

cpes : [ »

0 : cpe:2.3:h:unisoc:t770:-:*:*:*:*:*:*:* (string)

]

vendor : unisoc (string)

product : t770 (string)

versions : [ »

0 : { »

status : affected (string)

version : android13 (string)

}

1 : { »

status : affected (string)

version : android14 (string)

}

]

defaultStatus : unknown (string)

}

11 : { »

cpes : [ »

0 : cpe:2.3:h:unisoc:t820:-:*:*:*:*:*:*:* (string)

]

vendor : unisoc (string)

product : t820 (string)

versions : [ »

0 : { »

status : affected (string)

version : android13 (string)

}

1 : { »

status : affected (string)

version : android14 (string)

}

]

defaultStatus : unknown (string)

}

12 : { »

cpes : [ »

0 : cpe:2.3:h:unisoc:s8000:-:*:*:*:*:*:*:* (string)

]

vendor : unisoc (string)

product : s8000 (string)

versions : [ »

0 : { »

status : affected (string)

version : android13 (string)

}

1 : { »

status : affected (string)

version : android14 (string)

}

]

defaultStatus : unknown (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-10-09T18:52:08.233Z (string)

}

]

cna : { »

metrics : [ »

0 : { »

format : CVSS (string)

cvssV3_1 : { »

version : 3.1 (string)

baseScore : 6.5 (number)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H (string)

}

scenarios : [ »

0 : { »

lang : en (string)

value : GENERAL (string)

}

]

}

]

affected : [ »

0 : { »

vendor : Unisoc (Shanghai) Technologies Co., Ltd. (string)

product : SC7731E/SC9832E/SC9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 (string)

versions : [ »

0 : { »

status : affected (string)

version : Android13/Android14 (string)

}

]

defaultStatus : unaffected (string)

}

]

references : [ »

0 : { »

url : https://www.unisoc.com/en_us/secy/announcementDetail/1843898270204624897 (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : In linkturbonative service, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

description : cwe-77 Improper Neutralization of Special Elements used in a Command ('Command Injection') (string)

}

]

}

]

providerMetadata : { »

orgId : 63f92e9c-2193-4c24-98a9-93640392c3d3 (string)

shortName : Unisoc (string)

dateUpdated : 2024-10-09T06:43:29.015Z (string)

}

cveMetadata : { »

cveId : CVE-2024-39438 (string)

state : PUBLISHED (string)

dateUpdated : 2024-10-09T18:52:15.994Z (string)

dateReserved : 2024-06-25T06:13:32.360Z (string)

assignerOrgId : 63f92e9c-2193-4c24-98a9-93640392c3d3 (string)

datePublished : 2024-10-09T06:43:29.015Z (string)

assignerShortName : Unisoc (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:*", "matchCriteriaId": "879FFD0C-9B38-4CAA-B057-1086D794D469", "vulnerable": true}, {"criteria": "cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:*", "matchCriteriaId": "2700BCC5-634D-4EC6-AB67-5B678D5F951D", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:unisoc:s8000:-:*:*:*:*:*:*:*", "matchCriteriaId": "FDE05D06-C798-4217-8858-8C5DC2C94751", "vulnerable": false}, {"criteria": "cpe:2.3:h:unisoc:sc7731e:-:*:*:*:*:*:*:*", "matchCriteriaId": "AC867249-B767-4802-868D-6D0E356C8294", "vulnerable": false}, {"criteria": "cpe:2.3:h:unisoc:sc9832e:-:*:*:*:*:*:*:*", "matchCriteriaId": "25BBD3C5-E87C-4730-970C-19DF855AC3A2", "vulnerable": false}, {"criteria": "cpe:2.3:h:unisoc:sc9863a:-:*:*:*:*:*:*:*", "matchCriteriaId": "DE00DFDE-97DD-4D33-B580-73FEF677C71B", "vulnerable": false}, {"criteria": "cpe:2.3:h:unisoc:t310:-:*:*:*:*:*:*:*", "matchCriteriaId": "F20E00D8-2F00-4FA3-9455-37DC89908D96", "vulnerable": false}, {"criteria": "cpe:2.3:h:unisoc:t606:-:*:*:*:*:*:*:*", "matchCriteriaId": "905E39DD-7948-40A4-B042-EBB9A9591347", "vulnerable": false}, {"criteria": "cpe:2.3:h:unisoc:t610:-:*:*:*:*:*:*:*", "matchCriteriaId": "CDC980D6-B797-4AE1-B553-35395AE80D07", "vulnerable": false}, {"criteria": "cpe:2.3:h:unisoc:t612:-:*:*:*:*:*:*:*", "matchCriteriaId": "98408A48-561A-49D1-967F-834311742B7F", "vulnerable": false}, {"criteria": "cpe:2.3:h:unisoc:t616:-:*:*:*:*:*:*:*", "matchCriteriaId": "756E5850-CDC7-46C2-BAFC-1E2A359A2709", "vulnerable": false}, {"criteria": "cpe:2.3:h:unisoc:t618:-:*:*:*:*:*:*:*", "matchCriteriaId": "39002ECE-636A-4FEB-9A0B-8127E8AAC844", "vulnerable": false}, {"criteria": "cpe:2.3:h:unisoc:t760:-:*:*:*:*:*:*:*", "matchCriteriaId": "3D965CCA-C963-49E4-ACF0-2A9F458AF470", "vulnerable": false}, {"criteria": "cpe:2.3:h:unisoc:t770:-:*:*:*:*:*:*:*", "matchCriteriaId": "0FFEF06A-E3E0-486F-89CC-D52FF3F26F0B", "vulnerable": false}, {"criteria": "cpe:2.3:h:unisoc:t820:-:*:*:*:*:*:*:*", "matchCriteriaId": "49601008-D3FF-47CC-B961-6FDDFC7A0596", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "In linkturbonative service, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed."}, {"lang": "es", "value": "En el servicio linkturbonative, es posible que se produzca una inyecci\u00f3n de comandos debido a una validaci\u00f3n de entrada incorrecta. Esto podr\u00eda provocar una escalada local de privilegios, con la necesidad de permisos de ejecuci\u00f3n de System."}], "id": "CVE-2024-39438", "lastModified": "2024-10-17T17:19:11.143", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 0.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 0.6, "impactScore": 5.9, "source": "security@unisoc.com", "type": "Secondary"}]}, "published": "2024-10-09T07:15:08.687", "references": [{"source": "security@unisoc.com", "tags": ["Vendor Advisory"], "url": "https://www.unisoc.com/en_us/secy/announcementDetail/1843898270204624897"}], "sourceIdentifier": "security@unisoc.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-77"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:google:android:13.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 879FFD0C-9B38-4CAA-B057-1086D794D469 (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:o:google:android:14.0:*:*:*:*:*:*:* (string)

matchCriteriaId : 2700BCC5-634D-4EC6-AB67-5B678D5F951D (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:unisoc:s8000:-:*:*:*:*:*:*:* (string)

matchCriteriaId : FDE05D06-C798-4217-8858-8C5DC2C94751 (string)

vulnerable : false (boolean)

}

1 : { »

criteria : cpe:2.3:h:unisoc:sc7731e:-:*:*:*:*:*:*:* (string)

matchCriteriaId : AC867249-B767-4802-868D-6D0E356C8294 (string)

vulnerable : false (boolean)

}

2 : { »

criteria : cpe:2.3:h:unisoc:sc9832e:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 25BBD3C5-E87C-4730-970C-19DF855AC3A2 (string)

vulnerable : false (boolean)

}

3 : { »

criteria : cpe:2.3:h:unisoc:sc9863a:-:*:*:*:*:*:*:* (string)

matchCriteriaId : DE00DFDE-97DD-4D33-B580-73FEF677C71B (string)

vulnerable : false (boolean)

}

4 : { »

criteria : cpe:2.3:h:unisoc:t310:-:*:*:*:*:*:*:* (string)

matchCriteriaId : F20E00D8-2F00-4FA3-9455-37DC89908D96 (string)

vulnerable : false (boolean)

}

5 : { »

criteria : cpe:2.3:h:unisoc:t606:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 905E39DD-7948-40A4-B042-EBB9A9591347 (string)

vulnerable : false (boolean)

}

6 : { »

criteria : cpe:2.3:h:unisoc:t610:-:*:*:*:*:*:*:* (string)

matchCriteriaId : CDC980D6-B797-4AE1-B553-35395AE80D07 (string)

vulnerable : false (boolean)

}

7 : { »

criteria : cpe:2.3:h:unisoc:t612:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 98408A48-561A-49D1-967F-834311742B7F (string)

vulnerable : false (boolean)

}

8 : { »

criteria : cpe:2.3:h:unisoc:t616:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 756E5850-CDC7-46C2-BAFC-1E2A359A2709 (string)

vulnerable : false (boolean)

}

9 : { »

criteria : cpe:2.3:h:unisoc:t618:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 39002ECE-636A-4FEB-9A0B-8127E8AAC844 (string)

vulnerable : false (boolean)

}

10 : { »

criteria : cpe:2.3:h:unisoc:t760:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 3D965CCA-C963-49E4-ACF0-2A9F458AF470 (string)

vulnerable : false (boolean)

}

11 : { »

criteria : cpe:2.3:h:unisoc:t770:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 0FFEF06A-E3E0-486F-89CC-D52FF3F26F0B (string)

vulnerable : false (boolean)

}

12 : { »

criteria : cpe:2.3:h:unisoc:t820:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 49601008-D3FF-47CC-B961-6FDDFC7A0596 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

]

cveTags : [ *empty* ]

descriptions : [ »

0 : { »

lang : en (string)

value : In linkturbonative service, there is a possible command injection due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. (string)

}

1 : { »

lang : es (string)

value : En el servicio linkturbonative, es posible que se produzca una inyección de comandos debido a una validación de entrada incorrecta. Esto podría provocar una escalada local de privilegios, con la necesidad de permisos de ejecución de System. (string)

}

]

id : CVE-2024-39438 (string)

lastModified : 2024-10-17T17:19:11.143 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 6.7 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : HIGH (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 0.8 (number)

impactScore : 5.9 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

1 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 6.5 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : HIGH (string)

scope : UNCHANGED (string)

userInteraction : REQUIRED (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 0.6 (number)

impactScore : 5.9 (number)

source : security@unisoc.com (string)

type : Secondary (string)

}

]

}

published : 2024-10-09T07:15:08.687 (string)

references : [ »

0 : { »

source : security@unisoc.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://www.unisoc.com/en_us/secy/announcementDetail/1843898270204624897 (string)

}

]

sourceIdentifier : security@unisoc.com (string)

vulnStatus : Analyzed (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-77 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction Required

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object