Motorola Setup App Vulnerability Exposes Sensitive User Information
CVE-2023-41821

5MEDIUM

Key Information:

Vendor
Motorola
Status
Phones
Vendor
CVE Published:
3 May 2024

Summary

An improper export vulnerability exists in the Motorola Setup application, enabling potential local attackers to access sensitive user information. This flaw could compromise user privacy by allowing unauthorized access to data that should be properly secured. Users of the affected application should be aware of this issue and take necessary precautions to protect their information.

Affected Version(s)

Phones < 2023-09-01

References

https://en-us.support.motorola.com/app/answers/detail/a_i...

CVSS V3.1

Score:
5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Sergey Toshin and Illia Khorolskyi of Oversecured (ovesecured.com)
.