Read the docs
TI-2023-19699 Aliases CVE-2023-38301GHSA-4xc7-r2gw-w5cr

An issue was discovered in a third-party component related to vendor.gsm.serial, shipped…

Priority LOW 16CWE-200Published · Updated

Key facts

Attack vector
Local
Privileges required
High
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
Low · Low · None
Fix status
No fix listed

Attack profile from CVSS 3.1 · CISA ADP. Fix status from CNA. Impact type from CWE-200.

Summary

An issue was discovered in a third-party component related to vendor.gsm.serial, shipped on devices from multiple device manufacturers. Various software builds for the BLU View 2, Boost Mobile Celero 5G, Sharp Rouvo V, Motorola Moto G Pure, Motorola Moto G Power, T-Mobile Revvl 6 Pro 5G, and T-Mobile Revvl V+ 5G devices leak the device serial number to a system property that can be accessed by any local app on the device without any permissions or special privileges. Google restricted third-party apps from directly obtaining non-resettable device identifiers in Android 10 and higher, but in these instances they are leaked by a high-privilege process and can be obtained indirectly. The software build fingerprints for each confirmed vulnerable device are as follows: BLU View 2 (BLU/B131DL/B130DL:11/RP1A.200720.011/1672046950:user/release-keys); Boost Mobile Celero 5G (Celero5G/Jupiter/Jupiter:11/RP1A.200720.011/SW_S98119AA1_V067:user/release-keys); Sharp Rouvo V (SHARP/VZW_STTM21VAPP/STTM21VAPP:12/SP1A.210812.016/1KN0_0_530:user/release-keys); Motorola Moto G Pure (motorola/ellis_trac/ellis:11/RRHS31.Q3-46-110-2/74844:user/release-keys, motorola/ellis_trac/ellis:11/RRHS31.Q3-46-110-7/5cde8:user/release-keys, motorola/ellis_trac/ellis:11/RRHS31.Q3-46-110-10/d67faa:user/release-keys, motorola/ellis_trac/ellis:11/RRHS31.Q3-46-110-13/b4a29:user/release-keys, motorola/ellis_trac/ellis:12/S3RH32.20-42-10/1c2540:user/release-keys, motorola/ellis_trac/ellis:12/S3RHS32.20-42-13-2-1/6368dd:user/release-keys, motorola/ellis_a/ellis:11/RRH31.Q3-46-50-2/20fec:user/release-keys, motorola/ellis_vzw/ellis:11/RRH31.Q3-46-138/103bd:user/release-keys, motorola/ellis_vzw/ellis:11/RRHS31.Q3-46-138-2/e5502:user/release-keys, and motorola/ellis_vzw/ellis:12/S3RHS32.20-42-10-14-2/5e0b0:user/release-keys); Motorola Moto G Power (motorola/tonga_g/tonga:11/RRQ31.Q3-68-16-2/e5877:user/release-keys and motorola/tonga_g/tonga:12/S3RQS32.20-42-10-6/f876d3:user/release-keys); T-Mobile Revvl 6 Pro 5G (T-Mobile/Augusta/Augusta:12/SP1A.210812.016/SW_S98121AA1_V070:user/release-keys); and T-Mobile Revvl V+ 5G (T-Mobile/Sprout/Sprout:11/RP1A.200720.011/SW_S98115AA1_V077:user/release-keys). This malicious app reads from the "vendor.gsm.serial" system property to indirectly obtain the device serial number.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00164 5th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE names CISA-ADP · 7

CPEVersionsRoleVendor
cpe:2.3:h:verizon:sharp_rouvo_v:-:*:*:*:*:*:*:*not specified by CISA-ADP—Verizon
cpe:2.3:h:tracfone:blu_view_2:-:*:*:*:*:*:*:*not specified by CISA-ADP——
cpe:2.3:h:boost_mobile:celero_5g:-:*:*:*:*:*:*:*not specified by CISA-ADP——
cpe:2.3:h:motorola:moto_g_pure:-:*:*:*:*:*:*:*not specified by CISA-ADP—Motorola
cpe:2.3:h:motorola:moto_g_power:-:*:*:*:*:*:*:*not specified by CISA-ADP—Motorola
cpe:2.3:h:t-mobile:revvl_6_pro_5g:-:*:*:*:*:*:*:*not specified by CISA-ADP—T-mobile
cpe:2.3:h:t-mobile:revvl_v\+_5g:-:*:*:*:*:*:*:*not specified by CISA-ADP—T-mobile
  • cpe:2.3:h:verizon:sharp_rouvo_v:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Verizon
  • cpe:2.3:h:tracfone:blu_view_2:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·—
  • cpe:2.3:h:boost_mobile:celero_5g:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·—
  • cpe:2.3:h:motorola:moto_g_pure:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Motorola
  • cpe:2.3:h:motorola:moto_g_power:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·Motorola
  • cpe:2.3:h:t-mobile:revvl_6_pro_5g:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·T-mobile
  • cpe:2.3:h:t-mobile:revvl_v\+_5g:-:*:*:*:*:*:*:* Versions not specified by CISA-ADP — ·T-mobile

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2023-38301
  2. 2026-10-03 Alias added: GHSA-4xc7-r2gw-w5cr

References

Other 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences