CVE-2015-7946 HIGH

CVE-2015-7946: MTP service exposed during emergency dialer

Vendor Canonical
Product unity8 (Ubuntu)
Weakness CWE-200 · Info exposure
Published May 7, 2020
Last update September 16, 2024
View on NVD All CVEs

CVSS base score

7.3/10
Attack vector Physical
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

What the vulnerability does

01Description

Information Exposure vulnerability in Unity8 as used on the Ubuntu phone and possibly also in Unity8 shipped elsewhere. This allows an attacker to enable the MTP service by opening the emergency dialer. Fixed in 8.11+16.04.20160111.1-0ubuntu1 and 8.11+15.04.20160122-0ubuntu1.

Key dates

02Disclosure timeline

May 7, 2020 CVE published
September 16, 2024 Record updated