Vulnerabilities > CVE-2023-52275 - Missing Authorization vulnerability in Tecno-Mobile Camon X Firmware

047910
CVSS 2.1 - LOW
Attack vector
PHYSICAL
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
LOW
Integrity impact
NONE
Availability impact
NONE
low complexity
tecno-mobile
CWE-862

Summary

Gallery3d on Tecno Camon X CA7 devices allows attackers to view hidden images by navigating to data/com.android.gallery3d/.privatealbum/.encryptfiles and guessing the correct image file extension.

Vulnerable Configurations

Part Description Count
OS
Tecno-Mobile
1
Hardware
Tecno-Mobile
1

Common Weakness Enumeration (CWE)