Lucene search

K
cveSamsung MobileCVE-2023-21425
HistoryFeb 09, 2023 - 7:15 p.m.

CVE-2023-21425

2023-02-0919:15:15
CWE-287
Samsung Mobile
web.nvd.nist.gov
20
cve-2023-21425
improper access control
telecom application
local attackers
sensitive information
nvd

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

5.3

Confidence

High

EPSS

0

Percentile

5.1%

Improper access control vulnerability in telecom application prior to SMR JAN-2023 Release 1 allows local attackers to get sensitive information.

Affected configurations

Nvd
Node
samsungandroidMatch10.0-
OR
samsungandroidMatch10.0smr-apr-2020-r1
OR
samsungandroidMatch10.0smr-apr-2021-r1
OR
samsungandroidMatch10.0smr-apr-2022-r1
OR
samsungandroidMatch10.0smr-apr-2023-r1
OR
samsungandroidMatch10.0smr-aug-2020-r1
OR
samsungandroidMatch10.0smr-aug-2021-r1
OR
samsungandroidMatch10.0smr-aug-2022-r1
OR
samsungandroidMatch10.0smr-aug-2023-r1
OR
samsungandroidMatch10.0smr-dec-2019-r1
OR
samsungandroidMatch10.0smr-dec-2020-r1
OR
samsungandroidMatch10.0smr-dec-2021-r1
OR
samsungandroidMatch10.0smr-dec-2022-r1
OR
samsungandroidMatch10.0smr-dec-2023-r1
OR
samsungandroidMatch10.0smr-feb-2020-r1
OR
samsungandroidMatch10.0smr-feb-2021-r1
OR
samsungandroidMatch10.0smr-feb-2022-r1
OR
samsungandroidMatch10.0smr-feb-2023-r1
OR
samsungandroidMatch10.0smr-jan-2020-r1
OR
samsungandroidMatch10.0smr-jan-2021-r1
OR
samsungandroidMatch10.0smr-jan-2022-r1
OR
samsungandroidMatch10.0smr-jul-2020-r1
OR
samsungandroidMatch10.0smr-jul-2021-r1
OR
samsungandroidMatch10.0smr-jul-2022-r1
OR
samsungandroidMatch10.0smr-jul-2023-r1
OR
samsungandroidMatch10.0smr-jun-2020-r1
OR
samsungandroidMatch10.0smr-jun-2021-r1
OR
samsungandroidMatch10.0smr-jun-2022-r1
OR
samsungandroidMatch10.0smr-jun-2023-r1
OR
samsungandroidMatch10.0smr-mar-2020-r1
OR
samsungandroidMatch10.0smr-mar-2021-r1
OR
samsungandroidMatch10.0smr-mar-2022-r1
OR
samsungandroidMatch10.0smr-mar-2023-r1
OR
samsungandroidMatch10.0smr-may-2020-r1
OR
samsungandroidMatch10.0smr-may-2021-r1
OR
samsungandroidMatch10.0smr-may-2022-r1
OR
samsungandroidMatch10.0smr-may-2023-r1
OR
samsungandroidMatch10.0smr-nov-2019-r1
OR
samsungandroidMatch10.0smr-nov-2020-r1
OR
samsungandroidMatch10.0smr-nov-2021-r1
OR
samsungandroidMatch10.0smr-nov-2022-r1
OR
samsungandroidMatch10.0smr-nov-2023-r1
OR
samsungandroidMatch10.0smr-oct-2020-r1
OR
samsungandroidMatch10.0smr-oct-2021-r1
OR
samsungandroidMatch10.0smr-oct-2022-r1
OR
samsungandroidMatch10.0smr-oct-2023-r1
OR
samsungandroidMatch10.0smr-sep-2020-r1
OR
samsungandroidMatch10.0smr-sep-2021-r1
OR
samsungandroidMatch10.0smr-sep-2022-r1
OR
samsungandroidMatch10.0smr-sep-2023-r1
OR
samsungandroidMatch11.0-
OR
samsungandroidMatch11.0smr-apr-2021-r1
OR
samsungandroidMatch11.0smr-apr-2022-r1
OR
samsungandroidMatch11.0smr-apr-2023-r1
OR
samsungandroidMatch11.0smr-aug-2021-r1
OR
samsungandroidMatch11.0smr-aug-2022-r1
OR
samsungandroidMatch11.0smr-aug-2023-r1
OR
samsungandroidMatch11.0smr-dec-2020-r1
OR
samsungandroidMatch11.0smr-dec-2021-r1
OR
samsungandroidMatch11.0smr-dec-2022-r1
OR
samsungandroidMatch11.0smr-dec-2023-r1
OR
samsungandroidMatch11.0smr-feb-2021-r1
OR
samsungandroidMatch11.0smr-feb-2022-r1
OR
samsungandroidMatch11.0smr-feb-2023-r1
OR
samsungandroidMatch11.0smr-jan-2021-r1
OR
samsungandroidMatch11.0smr-jan-2022-r1
OR
samsungandroidMatch11.0smr-jul-2021-r1
OR
samsungandroidMatch11.0smr-jul-2022-r1
OR
samsungandroidMatch11.0smr-jul-2023-r1
OR
samsungandroidMatch11.0smr-jun-2021-r1
OR
samsungandroidMatch11.0smr-jun-2022-r1
OR
samsungandroidMatch11.0smr-jun-2023-r1
OR
samsungandroidMatch11.0smr-mar-2021-r1
OR
samsungandroidMatch11.0smr-mar-2022-r1
OR
samsungandroidMatch11.0smr-mar-2023-r1
OR
samsungandroidMatch11.0smr-may-2021-r1
OR
samsungandroidMatch11.0smr-may-2022-r1
OR
samsungandroidMatch11.0smr-may-2023-r1
OR
samsungandroidMatch11.0smr-nov-2021-r1
OR
samsungandroidMatch11.0smr-nov-2022-r1
OR
samsungandroidMatch11.0smr-nov-2023-r1
OR
samsungandroidMatch11.0smr-oct-2021-r1
OR
samsungandroidMatch11.0smr-oct-2022-r1
OR
samsungandroidMatch11.0smr-oct-2023-r1
OR
samsungandroidMatch11.0smr-sep-2021-r1
OR
samsungandroidMatch11.0smr-sep-2022-r1
OR
samsungandroidMatch11.0smr-sep-2023-r1
OR
samsungandroidMatch12.0-
OR
samsungandroidMatch12.0smr-apr-2022-r1
OR
samsungandroidMatch12.0smr-apr-2023-r1
OR
samsungandroidMatch12.0smr-aug-2022-r1
OR
samsungandroidMatch12.0smr-aug-2023-r1
OR
samsungandroidMatch12.0smr-dec-2021-r1
OR
samsungandroidMatch12.0smr-dec-2022-r1
OR
samsungandroidMatch12.0smr-dec-2023-r1
OR
samsungandroidMatch12.0smr-feb-2022-r1
OR
samsungandroidMatch12.0smr-feb-2023-r1
OR
samsungandroidMatch12.0smr-jan-2022-r1
OR
samsungandroidMatch12.0smr-jul-2022-r1
OR
samsungandroidMatch12.0smr-jul-2023-r1
OR
samsungandroidMatch12.0smr-jun-2022-r1
OR
samsungandroidMatch12.0smr-jun-2023-r1
OR
samsungandroidMatch12.0smr-mar-2022-r1
OR
samsungandroidMatch12.0smr-mar-2023-r1
OR
samsungandroidMatch12.0smr-may-2022-r1
OR
samsungandroidMatch12.0smr-may-2023-r1
OR
samsungandroidMatch12.0smr-nov-2021-r1
OR
samsungandroidMatch12.0smr-nov-2022-r1
OR
samsungandroidMatch12.0smr-nov-2023-r1
OR
samsungandroidMatch12.0smr-oct-2022-r1
OR
samsungandroidMatch12.0smr-oct-2023-r1
OR
samsungandroidMatch12.0smr-sep-2022-r1
OR
samsungandroidMatch12.0smr-sep-2023-r1
OR
samsungandroidMatch13.0-
OR
samsungandroidMatch13.0smr-apr-2023-r1
OR
samsungandroidMatch13.0smr-aug-2023-r1
OR
samsungandroidMatch13.0smr-dec-2022-r1
OR
samsungandroidMatch13.0smr-dec-2023-r1
OR
samsungandroidMatch13.0smr-feb-2023-r1
OR
samsungandroidMatch13.0smr-jul-2023-r1
OR
samsungandroidMatch13.0smr-jun-2023-r1
OR
samsungandroidMatch13.0smr-mar-2023-r1
OR
samsungandroidMatch13.0smr-may-2023-r1
OR
samsungandroidMatch13.0smr-nov-2022-r1
OR
samsungandroidMatch13.0smr-nov-2023-r1
OR
samsungandroidMatch13.0smr-oct-2022-r1
OR
samsungandroidMatch13.0smr-oct-2023-r1
OR
samsungandroidMatch13.0smr-sep-2023-r1
VendorProductVersionCPE
samsungandroid10.0cpe:2.3:o:samsung:android:10.0:-:*:*:*:*:*:*
samsungandroid10.0cpe:2.3:o:samsung:android:10.0:smr-apr-2020-r1:*:*:*:*:*:*
samsungandroid10.0cpe:2.3:o:samsung:android:10.0:smr-apr-2021-r1:*:*:*:*:*:*
samsungandroid10.0cpe:2.3:o:samsung:android:10.0:smr-apr-2022-r1:*:*:*:*:*:*
samsungandroid10.0cpe:2.3:o:samsung:android:10.0:smr-apr-2023-r1:*:*:*:*:*:*
samsungandroid10.0cpe:2.3:o:samsung:android:10.0:smr-aug-2020-r1:*:*:*:*:*:*
samsungandroid10.0cpe:2.3:o:samsung:android:10.0:smr-aug-2021-r1:*:*:*:*:*:*
samsungandroid10.0cpe:2.3:o:samsung:android:10.0:smr-aug-2022-r1:*:*:*:*:*:*
samsungandroid10.0cpe:2.3:o:samsung:android:10.0:smr-aug-2023-r1:*:*:*:*:*:*
samsungandroid10.0cpe:2.3:o:samsung:android:10.0:smr-dec-2019-r1:*:*:*:*:*:*
Rows per page:
1-10 of 1281

CNA Affected

[
  {
    "vendor": "Samsung Mobile",
    "product": "Samsung Mobile Devices",
    "versions": [
      {
        "version": "Q(10), R(11), S(12), T(13)",
        "status": "affected",
        "lessThan": "SMR Jan-2023 Release 1",
        "versionType": "custom"
      }
    ]
  }
]

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

AI Score

5.3

Confidence

High

EPSS

0

Percentile

5.1%

Related for CVE-2023-21425