Lucene search
HistorySep 06, 2023 - 4:15 a.m.
CVE-2023-30728
vulnerability
packageinstallerchn
local attacker
arbitrary file
user interaction
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
AI Score
4.8
Confidence
High
EPSS
0.001
Percentile
20.4%
Intent redirection vulnerability in PackageInstallerCHN prior to version 13.1.03.00 allows local attacker to access arbitrary file. This vulnerability requires user interaction.
Affected configurations
Node
samsungpackageinstallerchnRange<13.1.03.00
| Vendor | Product | Version | CPE |
|---|---|---|---|
| samsung | packageinstallerchn | * | cpe:2.3:a:samsung:packageinstallerchn:*:*:*:*:*:*:*:* |
Related
prion
prion
Information disclosure
2023-09-06 04:15:00
cvelist
cvelist
CVE-2023-30728
2023-09-06 03:12:14
cve
cve
CVE-2023-30728
2023-09-06 04:15:16
vulnrichment
vulnrichment
CVE-2023-30728
2023-09-06 03:12:14
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
AI Score
4.8
Confidence
High
EPSS
0.001
Percentile
20.4%
Related for NVD:CVE-2023-30728