CVE-2023-32840

CVSS 3.1 Score 6.5 of 10 (medium)

Details

Published Nov 6, 2023
Updated: Nov 13, 2023
CWE ID 787

Summary

CVE-2023-32840 is a vulnerability affecting the modem's CCCI (Customer Premises Equipment Control Connection Interface) component. It involves a missing bounds check that could result in an out-of-bounds write. This issue may allow for local privilege escalation, requiring System execution privileges. User interaction could be necessary for successful exploitation. The patch ID for mitigation is MOLY01138425, and the issue was assigned the ID MOLY01138425 (MSV-862).

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share