CVE Catalog

CVE-2023-33901

MediumCVSS 5.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.08%

0th percentile - higher than 0% of all known CVEs

Summary

In the Bluetooth service, there is a missing permission check, which could lead to local information disclosure without the need for additional execution privileges.

Risk Assessment

The lack of permission checks may allow unauthorized users to access sensitive data, posing a threat to privacy and information security within the organization.

Recommendation

It is recommended to implement appropriate permission controls in the Bluetooth service to prevent unauthorized access to information.

Original NVD description (English source)

In bluetooth service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS