Lucene search
Samsung MobileCVE-2023-21494HistoryMay 04, 2023 - 9:15 p.m.
CVE-2023-21494
2023-05-0421:15:10
CWE-120
CWE-20
Samsung Mobile
web.nvd.nist.gov
19
vulnerability
buffer overflow
auth api
shannon baseband
smr
remote attackers
nvd
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.5
Confidence
High
EPSS
0.001
Percentile
47.7%
Potential buffer overflow vulnerability in auth api in mm_Authentication.c in Shannon baseband prior to SMR May-2023 Release 1 allows remote attackers to cause invalid memory access.
Affected configurations
Node
samsungandroidMatch13.0-
ORsamsungandroidMatch13.0smr-apr-2023-r1
ORsamsungandroidMatch13.0smr-dec-2022-r1
ORsamsungandroidMatch13.0smr-feb-2023-r1
ORsamsungandroidMatch13.0smr-jan-2023-r1
ORsamsungandroidMatch13.0smr-mar-2023-r1
ORsamsungandroidMatch13.0smr-nov-2022-r1
ORsamsungandroidMatch13.0smr-oct-2022-r1
samsungexynosMatch-
| Vendor | Product | Version | CPE |
|---|---|---|---|
| samsung | android | 13.0 | cpe:2.3:o:samsung:android:13.0:-:*:*:*:*:*:* |
| samsung | android | 13.0 | cpe:2.3:o:samsung:android:13.0:smr-apr-2023-r1:*:*:*:*:*:* |
| samsung | android | 13.0 | cpe:2.3:o:samsung:android:13.0:smr-dec-2022-r1:*:*:*:*:*:* |
| samsung | android | 13.0 | cpe:2.3:o:samsung:android:13.0:smr-feb-2023-r1:*:*:*:*:*:* |
| samsung | android | 13.0 | cpe:2.3:o:samsung:android:13.0:smr-jan-2023-r1:*:*:*:*:*:* |
| samsung | android | 13.0 | cpe:2.3:o:samsung:android:13.0:smr-mar-2023-r1:*:*:*:*:*:* |
| samsung | android | 13.0 | cpe:2.3:o:samsung:android:13.0:smr-nov-2022-r1:*:*:*:*:*:* |
| samsung | android | 13.0 | cpe:2.3:o:samsung:android:13.0:smr-oct-2022-r1:*:*:*:*:*:* |
| samsung | exynos | - | cpe:2.3:h:samsung:exynos:-:*:*:*:*:*:*:* |
CNA Affected
[
{
"vendor": "Samsung Mobile",
"product": "Samsung Mobile Devices",
"versions": [
{
"version": "Select devices using Exynos CP chipsets",
"status": "affected",
"lessThan": "SMR May-2023 Release 1",
"versionType": "custom"
}
]
}
]Related
cvelist
cvelist
CVE-2023-21494
2023-05-04 00:00:00
nvd
nvd
CVE-2023-21494
2023-05-04 21:15:10
prion
prion
Buffer overflow
2023-05-04 21:15:00
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
9.5
Confidence
High
EPSS
0.001
Percentile
47.7%
Related for CVE-2023-21494