CVE-2022-47356 | ByteOS Network

Vulnerability Details :

CVE-2022-47356

Assigner-Unisoc

Assigner Org ID-63f92e9c-2193-4c24-98a9-93640392c3d3

Published At-06 Feb, 2023 | 05:27

Updated At-26 Mar, 2025 | 14:25

In log service, there is a missing permission check. This could lead to local denial of service in log service.

EPSS History

Score

Latest Score

-

N/A

Percentile

Latest Percentile

-

N/A

▼Common Vulnerabilities and Exposures (CVE)

Assigner:Unisoc

Assigner Org ID:63f92e9c-2193-4c24-98a9-93640392c3d3

Published At:06 Feb, 2023 | 05:27

Updated At:26 Mar, 2025 | 14:25

▼CVE Numbering Authority (CNA)

In log service, there is a missing permission check. This could lead to local denial of service in log service.

Affected Products

Vendor

Unisoc (Shanghai) Technologies Co., Ltd.

Product

SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T610/T618/T606/T612/T616/T760/T770/T820/S8000

Default Status

unaffected

Versions

Affected

Android10/Android11/Android12

Problem Types

Type	CWE ID	Description
text	N/A	n/a

Type: text

CWE ID: N/A

Description: n/a

References

Hyperlink	Resource
https://www.unisoc.com/en_us/secy/announcementDetail/1621031430231134210	N/A

Hyperlink: https://www.unisoc.com/en_us/secy/announcementDetail/1621031430231134210

Resource: N/A

▼Authorized Data Publishers (ADP)

1. CVE Program Container

References

Hyperlink	Resource
https://www.unisoc.com/en_us/secy/announcementDetail/1621031430231134210	x_transferred

Hyperlink: https://www.unisoc.com/en_us/secy/announcementDetail/1621031430231134210

Resource:

x_transferred

2. CISA ADP Vulnrichment

Problem Types

Type	CWE ID	Description
CWE	CWE-400	CWE-400 Uncontrolled Resource Consumption

Type: CWE

CWE ID: CWE-400

Description: CWE-400 Uncontrolled Resource Consumption

Metrics

Version	Base score	Base severity	Vector
3.1	4.0	MEDIUM	CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H

Version: 3.1

Base score: 4.0

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H

Metrics Other Info

▼National Vulnerability Database (NVD)

Source:security@unisoc.com

Published At:12 Feb, 2023 | 04:15

Updated At:26 Mar, 2025 | 15:15

In log service, there is a missing permission check. This could lead to local denial of service in log service.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	5.5	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Secondary	3.1	4.0	MEDIUM	CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H

Type: Primary

Version: 3.1

Base score: 5.5

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Type: Secondary

Version: 3.1

Base score: 4.0

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H

CPE Matches

>>android>>10.0

cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:*

>>android>>11.0

cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:*

>>android>>12.0

cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*

Unisoc (Shanghai) Technologies Co., Ltd.

>>s8000>>-

cpe:2.3:h:unisoc:s8000:-:*:*:*:*:*:*:*

Unisoc (Shanghai) Technologies Co., Ltd.

cpe:2.3:h:unisoc:sc7731e:-:*:*:*:*:*:*:*

Unisoc (Shanghai) Technologies Co., Ltd.

cpe:2.3:h:unisoc:sc9832e:-:*:*:*:*:*:*:*

Unisoc (Shanghai) Technologies Co., Ltd.

cpe:2.3:h:unisoc:sc9863a:-:*:*:*:*:*:*:*

Unisoc (Shanghai) Technologies Co., Ltd.

>>t310>>-

cpe:2.3:h:unisoc:t310:-:*:*:*:*:*:*:*

Unisoc (Shanghai) Technologies Co., Ltd.

>>t606>>-

cpe:2.3:h:unisoc:t606:-:*:*:*:*:*:*:*

Unisoc (Shanghai) Technologies Co., Ltd.

>>t610>>-

cpe:2.3:h:unisoc:t610:-:*:*:*:*:*:*:*

Unisoc (Shanghai) Technologies Co., Ltd.

>>t612>>-

cpe:2.3:h:unisoc:t612:-:*:*:*:*:*:*:*

Unisoc (Shanghai) Technologies Co., Ltd.

>>t616>>-

cpe:2.3:h:unisoc:t616:-:*:*:*:*:*:*:*

Unisoc (Shanghai) Technologies Co., Ltd.

>>t618>>-

cpe:2.3:h:unisoc:t618:-:*:*:*:*:*:*:*

Unisoc (Shanghai) Technologies Co., Ltd.

>>t760>>-

cpe:2.3:h:unisoc:t760:-:*:*:*:*:*:*:*

Unisoc (Shanghai) Technologies Co., Ltd.

>>t770>>-

cpe:2.3:h:unisoc:t770:-:*:*:*:*:*:*:*

Unisoc (Shanghai) Technologies Co., Ltd.

>>t820>>-

cpe:2.3:h:unisoc:t820:-:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-noinfo	Primary	nvd@nist.gov
CWE-400	Secondary	134c704f-9b21-4f2e-91b3-4a467353bcc0

CWE ID: NVD-CWE-noinfo

Type: Primary

Source: nvd@nist.gov

CWE ID: CWE-400

Type: Secondary

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

References

Hyperlink	Source	Resource
https://www.unisoc.com/en_us/secy/announcementDetail/1621031430231134210	security@unisoc.com	Vendor Advisory
https://www.unisoc.com/en_us/secy/announcementDetail/1621031430231134210	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory

Hyperlink: https://www.unisoc.com/en_us/secy/announcementDetail/1621031430231134210

Source: security@unisoc.com

Resource:

Vendor Advisory

Hyperlink: https://www.unisoc.com/en_us/secy/announcementDetail/1621031430231134210

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory