CVE-2023-52341: In Plaintext COUNTER CHECK message accepted before AS security activation, there is a possible missing permission check

Description

In Plaintext COUNTER CHECK message accepted before AS security activation, there is a possible missing permission check. This could lead to remote information disclosure no additional execution privileges needed

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Attack vector

Network

Complexity

Low

Privileges

None

User interaction

None

Confidentiality

High

Integrity

None

Availability

None

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)0.3% · higher than 28% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

AN

Android · Google

12.0; 13.0 · source: NVD

T7

T760/T770/T820/S8000 · Unisoc (Shanghai) Technologies Co., Ltd.

Android11/Android12/Android13 · source: vendor

S8

S8000 · Unisoc

s8000 · source: CISA

T7

T760 · Unisoc

t760 · source: CISA

T7

T770 · Unisoc

t770 · source: CISA

T8

T820 · Unisoc

t820 · source: CISA