CVE-2015-7946CWE-200

MTP service exposed during emergency dialer

High · published May 7, 2020

CVSS v3.1
7.3
EPSS
0%
Percentile
29.1
In the wild
Unconfirmed
What it is

Information Exposure vulnerability in Unity8 as used on the Ubuntu phone and possibly also in Unity8 shipped elsewhere. This allows an attacker to enable the MTP service by opening the emergency dialer. Fixed in 8.11+16.04.20160111.1-0ubuntu1 and 8.11+15.04.20160122-0ubuntu1.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00366 · 29.1th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2020-05-07T22:15Z
EPSS history
Timeline
  • 07 MAY 22:15Z
    MTP service exposed during emergency dialer
    cvelistv5