Vulnerabilities > CVE-2021-38789 - Missing Authorization vulnerability in Allwinnertech Android Q SDK 1.0

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
low complexity
allwinnertech
CWE-862

Summary

Allwinner R818 SoC Android Q SDK V1.0 is affected by an incorrect access control vulnerability that does not check the caller's permission, in which a third-party app could change system settings.

Vulnerable Configurations

Part Description Count
Application
Allwinnertech
1
Hardware
Allwinnertech
1

Common Weakness Enumeration (CWE)