Lucene search

Samsung MobileCVE-2023-21447

HistoryFeb 09, 2023 - 7:15 p.m.

CVE-2023-21447

2023-02-0919:15:16

CWE-668

CWE-284

Samsung Mobile

web.nvd.nist.gov

cve-2023-21447

improper access control

samsung cloud

vulnerability

local attackers

privilege escalation

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

4.2

Confidence

High

EPSS

Percentile

5.1%

JSON

Improper access control vulnerabilities in Samsung Cloud prior to version 5.3.0.32 allows local attackers to access information with Samsung Cloud's privilege via implicit intent.

Affected configurations

Nvd

Node

samsungcloudRange<5.3.0.32

VendorProductVersionCPE
samsungcloud*cpe:2.3:a:samsung:cloud:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
samsung	cloud	*	cpe:2.3:a:samsung:cloud::::::::

CNA Affected

[
  {
    "vendor": "Samsung Mobile",
    "product": "Samsung Cloud",
    "versions": [
      {
        "version": "unspecified",
        "status": "affected",
        "lessThan": "5.3.0.32",
        "versionType": "custom"
      }
    ]
  }
]

References

security.samsungmobile.com/serviceWeb.smsb?year=2023&month=02

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

4.2

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for CVE-2023-21447