ByteOS Network

Vulnerability Details :

CVE-2022-42776

Assigner-Unisoc

Assigner Org ID-63f92e9c-2193-4c24-98a9-93640392c3d3

Published At-06 Dec, 2022 | 00:00

Updated At-23 Apr, 2025 | 18:27

In UscAIEngine service, there is a missing permission check. This could lead to set up UscAIEngine service with no additional execution privileges needed.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:Unisoc

Assigner Org ID:63f92e9c-2193-4c24-98a9-93640392c3d3

Published At:06 Dec, 2022 | 00:00

Updated At:23 Apr, 2025 | 18:27

▼CVE Numbering Authority (CNA)

In UscAIEngine service, there is a missing permission check. This could lead to set up UscAIEngine service with no additional execution privileges needed.

Affected Products

Vendor

Unisoc (Shanghai) Technologies Co., Ltd.

Product

SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

Versions

Affected

Android10/Android11/Android12

Problem Types

Type	CWE ID	Description
CWE	CWE-862	CWE-862 Missing Authorization

Type: CWE

CWE ID: CWE-862

Description: CWE-862 Missing Authorization

References

Hyperlink	Resource
https://www.unisoc.com/en_us/secy/announcementDetail/1599588060988411006	N/A

Hyperlink: https://www.unisoc.com/en_us/secy/announcementDetail/1599588060988411006

Resource: N/A

▼Authorized Data Publishers (ADP)

1. CVE Program Container

References

Hyperlink	Resource
https://www.unisoc.com/en_us/secy/announcementDetail/1599588060988411006	x_transferred

Hyperlink: https://www.unisoc.com/en_us/secy/announcementDetail/1599588060988411006

Resource:

x_transferred

2. CISA ADP Vulnrichment

Metrics

Version	Base score	Base severity	Vector
3.1	7.8	HIGH	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Version: 3.1

Base score: 7.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Metrics Other Info

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:security@unisoc.com

Published At:06 Dec, 2022 | 07:15

Updated At:08 Dec, 2022 | 04:29

In UscAIEngine service, there is a missing permission check. This could lead to set up UscAIEngine service with no additional execution privileges needed.