CVE Catalog

CVE-2023-33902

MediumCVSS 5.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.15%

5th percentile - higher than 5% of all known CVEs

Summary

In the Bluetooth service, there is a missing permission check, which could lead to local information disclosure without the need for additional execution privileges.

Risk Assessment

The lack of permission checks may allow unauthorized users to access sensitive data, posing a threat to the privacy and security of the organization.

Recommendation

It is recommended to implement appropriate permission controls in the Bluetooth service to prevent unauthorized access to information.

Original NVD description (English source)

In bluetooth service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS