CVE-2023-41818

MediumCVSS 5.0/10Last modified Jun 17, 2026

Description

An improper use of the SD card for sensitive data vulnerability was reported in the Motorola Device Help application that could allow a local attacker to read system logs.

Metrics

CVSS 3.1 5.0/10CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-921

Affected software

VendorProductVersions
MotorolaPhones< 2023-12-01

References

Timeline

Published
May 3, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2023

CVE-2023-418196.1A PendingIntent hijacking vulnerability was reported in the Motorola Face Unlock application that could allow a local attacker to access unaCVE-2023-41829.8A vulnerability, which was classified as critical, was found in SourceCodester Inventory Management System 1.0. This affects an unknown partCVE-2023-418205.0An implicit intent vulnerability was reported in the Motorola Ready For application that could allow a local attacker to read information abCVE-2023-418215.0A an improper export vulnerability was reported in the Motorola Setup application that could allow a local attacker to read sensitive user iCVE-2023-418224.8An improper export vulnerability was reported in the Motorola Interface Test Tool application that could allow a malicious local applicationCVE-2023-418234.4An improper export vulnerability was reported in the Motorola Phone Extension application, that could allow a local attacker to execute unauCVE-2023-418242.8An implicit intent vulnerability was reported in the Motorola Phone Calls application that could allow a local attacker to read the calling CVE-2023-418252.8A path traversal vulnerability was reported in the Motorola Ready For application that could allow a local attacker to access local files.CVE-2023-418265.1A PendingIntent hijacking vulnerability in Motorola Device Help (Genie) application that could allow local attackers to access files or inteCVE-2023-418275.1An improper export vulnerability was reported in the Motorola OTA update application, that could allow a malicious, local application to injCVE-2023-418284.4An implicit intent export vulnerability was reported in the Motorola Phone application, that could allow unauthorized access to a non-exportCVE-2023-418295.0An improper export vulnerability was reported in the Motorola Carrier Services application that could allow a malicious, local application t
CVE-2023-41818: Medium severity, CVSS 5.0 | Vulnix