{"id":"CVE-2015-7946","aliases":["EUVD-2015-7843","GHSA-8x99-rqcq-6fvg","UBUNTU-CVE-2015-7946"],"status":"published","title":"MTP service exposed during emergency dialer","description":"Information Exposure vulnerability in Unity8 as used on the Ubuntu phone and possibly also in Unity8 shipped elsewhere. This allows an attacker to enable the MTP service by opening the emergency dialer. Fixed in 8.11+16.04.20160111.1-0ubuntu1 and 8.11+15.04.20160122-0ubuntu1.","severity":{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-08","score":0.00366,"percentile":0.30703,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2020-05-07T22:15:13Z","modified":"2026-06-17T00:33:26Z","products":[{"vendor":"canonical","product":"unity8 (ubuntu)"},{"vendor":"ubports","product":"unity8"}],"references":[{"url":"https://launchpad.net/bugs/1525981","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-7946"},{"url":"https://github.com/advisories/GHSA-8x99-rqcq-6fvg"},{"url":"https://ubuntu.com/security/CVE-2015-7946","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-7946","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2015-7946","title":"MTP service exposed during emergency dialer","description":"Information Exposure vulnerability in Unity8 as used on the Ubuntu phone and possibly also in Unity8 shipped elsewhere. This allows an attacker to enable the MTP service by opening the emergency dialer. Fixed in 8.11+16.04.20160111.1-0ubuntu1 and 8.11+15.04.20160122-0ubuntu1.","status":"published","published":"2020-05-07T22:15:13.142Z","modified":"2024-09-16T22:34:53.134Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N","level":"high","assessor":"cna"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:35:45.088047Z"}],"euvd":[{"id":"EUVD-2015-7843","description":"Information Exposure vulnerability in Unity8 as used on the Ubuntu phone and possibly also in Unity8 shipped elsewhere. This allows an attacker to enable the MTP service by opening the emergency dialer. Fixed in 8.11+16.04.20160111.1-0ubuntu1 and 8.11+15.04.20160122-0ubuntu1.","status":"published","published":"2020-05-07T22:15:13Z","modified":"2024-09-16T22:34:53Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-03T00:55:02.001238Z"}],"ghsa":[{"id":"GHSA-8x99-rqcq-6fvg","title":"Information Exposure vulnerability in Unity8 as used on the Ubuntu phone and possibly also in...","description":"Information Exposure vulnerability in Unity8 as used on the Ubuntu phone and possibly also in Unity8 shipped elsewhere. This allows an attacker to enable the MTP service by opening the emergency dialer. Fixed in 8.11+16.04.20160111.1-0ubuntu1 and 8.11+15.04.20160122-0ubuntu1.","status":"published","published":"2022-05-24T17:17:27Z","modified":"2023-01-29T05:02:34Z","updated_at":"2026-11-02T14:45:07.130995Z"}],"nvd":[{"id":"CVE-2015-7946","description":"Information Exposure vulnerability in Unity8 as used on the Ubuntu phone and possibly also in Unity8 shipped elsewhere. This allows an attacker to enable the MTP service by opening the emergency dialer. Fixed in 8.11+16.04.20160111.1-0ubuntu1 and 8.11+15.04.20160122-0ubuntu1.","status":"published","published":"2020-05-07T23:15:11.42Z","modified":"2026-06-17T00:33:26.447Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N","level":"high","assessor":"secondary"},{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:03:20.037729Z"}],"osv":[{"id":"UBUNTU-CVE-2015-7946","description":"Information Exposure vulnerability in Unity8 as used on the Ubuntu phone and possibly also in Unity8 shipped elsewhere. This allows an attacker to enable the MTP service by opening the emergency dialer. Fixed in 8.11+16.04.20160111.1-0ubuntu1 and 8.11+15.04.20160122-0ubuntu1.","status":"withdrawn","published":"2020-05-07T23:15:00Z","modified":"2025-07-16T07:17:37.751644Z","cvss":[{"version":"3.1","score":4.6,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"},{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:54:10.737723Z"}]}}