CVE-2023-33914

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

In NIA0 algorithm in Security Mode Command, there is a possible missing verification incorrect input. This could lead to remote information disclosure no additional execution privileges needed

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
Unisoc (Shanghai) Technologies Co., Ltd.	T760/T770/T820/S8000	Android13/Android11/Android12
unisoc	t760	android_13; android_11; android_12
unisoc	t770	android_13; android_12; android_11
unisoc	t820	android_13; android_12; android_11
unisoc	s8000	android_13; android_12; android_11

References

Timeline

Published: Sep 4, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-339157.5In LTE protocol stack, there is a possible missing permission check. This could lead to remote information disclosure no additional executio CVE-2023-339165.5In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution CVE-2023-339175.5In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution CVE-2023-339185.5In vowifiservice, there is a possible missing permission check.This could lead to local information disclosure with no additional execution CVE-2023-339197.2A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05), CP-8050 MASTER MODULE (All versions < CPCI85 V05).CVE-2023-33927.2The Read More & Accordion WordPress plugin before 3.2.7 unserializes user input provided via the settings, which could allow high-privilege CVE-2023-339206.8A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05), CP-8050 MASTER MODULE (All versions < CPCI85 V05).CVE-2023-339216.8A vulnerability has been identified in CP-8031 MASTER MODULE (All versions < CPCI85 V05), CP-8050 MASTER MODULE (All versions < CPCI85 V05).CVE-2023-339224.3Missing Authorization vulnerability in Elementor Elementor Website Builder.This issue affects Elementor Website Builder: from n/a through 3.CVE-2023-339234.3Missing Authorization vulnerability in HashThemes Viral News, HashThemes Viral, HashThemes HashOne.This issue affects Viral News: from n/a t CVE-2023-339249.8Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Felix Welberg SIS Handball allows SQL CVE-2023-339256.1Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in PluginForage WooCommerce Product Categories Selection Widget plugin <= 2.0 ver