Lucene search

Samsung MobileCVE-2023-30703

HistoryAug 10, 2023 - 2:15 a.m.

CVE-2023-30703

2023-08-1002:15:12

Samsung Mobile

web.nvd.nist.gov

cve-2023-30703

improper url validation

vulnerability

samsung members

nvd

security

access

sensitive information

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

AI Score

4.6

Confidence

High

EPSS

0.001

Percentile

24.8%

JSON

Improper URL validation vulnerability in Samsung Members prior to version 14.0.07.1 allows attackers to access sensitive information.

Affected configurations

Nvd

Node

samsungmembersRange<14.0.07.1

VendorProductVersionCPE
samsungmembers*cpe:2.3:a:samsung:members:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
samsung	members	*	cpe:2.3:a:samsung:members::::::::

CNA Affected

[
  {
    "vendor": "Samsung Mobile",
    "product": "Samsung Members",
    "versions": [
      {
        "status": "unaffected",
        "version": "14.0.07.1"
      }
    ],
    "defaultStatus": "affected"
  }
]

References

security.samsungmobile.com/serviceWeb.smsb?year=2023&month=08

CVSS3

4.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

AI Score

4.6

Confidence

High

EPSS

0.001

Percentile

24.8%

JSON

Related for CVE-2023-30703