CVE-2023-41784 — MEDIUM (6.6)

Vulnerability Description

Permissions and Access Control Vulnerability in ZTE Red Magic 8 Pro

CVSS Score

6.6

MEDIUM

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:L/I:H/A:L

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality

LOW

Integrity

HIGH

Availability

LOW

Affected Products

Vendor	Product	Versions
Zte	Redmagic 8 Pro Firmware	gen_cn_nx729jv1.0.0b21mr
Zte	Redmagic 8 Pro	-

Related Weaknesses (CWE)

CWE-269

References

https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1034444Vendor Advisory
https://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1034444Vendor Advisory

FAQ

What is CVE-2023-41784?

CVE-2023-41784 is a vulnerability with a CVSS score of 6.6 (MEDIUM). Permissions and Access Control Vulnerability in ZTE Red Magic 8 Pro

How severe is CVE-2023-41784?

CVE-2023-41784 has been rated MEDIUM with a CVSS base score of 6.6/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-41784?

Check the references section above for vendor advisories and patch information. Affected products include: Zte Redmagic 8 Pro Firmware, Zte Redmagic 8 Pro.