Lucene search

[email protected]CVE-2023-21502

HistoryMay 04, 2023 - 9:15 p.m.

CVE-2023-21502

2023-05-0421:15:10

CWE-20

[email protected]

web.nvd.nist.gov

cve-2023-21502

improper input validation

factorytest

local attackers

privilege escalation

debugging commands

nvd

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.6 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Improper input validation vulnerability in FactoryTest application prior to SMR May-2023 Release 1 allows local attackers to get privilege escalation via debugging commands.

Affected configurations

NVD

Node

samsungandroidMatch12.0-

samsungandroidMatch12.0smr-apr-2022-r1

samsungandroidMatch12.0smr-aug-2022-r1

samsungandroidMatch12.0smr-dec-2021-r1

samsungandroidMatch12.0smr-dec-2022-r1

samsungandroidMatch12.0smr-feb-2022-r1

samsungandroidMatch12.0smr-feb-2023-r1

samsungandroidMatch12.0smr-jan-2022-r1

samsungandroidMatch12.0smr-jul-2022-r1

samsungandroidMatch12.0smr-jun-2022-r1

samsungandroidMatch12.0smr-mar-2022-r1

samsungandroidMatch12.0smr-may-2022-r1

samsungandroidMatch12.0smr-nov-2021-r1

samsungandroidMatch12.0smr-nov-2022-r1

samsungandroidMatch12.0smr-oct-2022-r1

samsungandroidMatch12.0smr-sep-2022-r1

samsungandroidMatch13.0-

samsungandroidMatch13.0smr-apr-2023-r1

samsungandroidMatch13.0smr-dec-2022-r1

samsungandroidMatch13.0smr-feb-2023-r1

samsungandroidMatch13.0smr-jan-2023-r1

samsungandroidMatch13.0smr-mar-2023-r1

samsungandroidMatch13.0smr-nov-2022-r1

samsungandroidMatch13.0smr-oct-2022-r1

CPENameOperatorVersion
samsung:androidsamsung androideq12.0
samsung:androidsamsung androideq13.0

CPE	Name	Operator	Version
samsung:android	samsung android	eq	12.0
samsung:android	samsung android	eq	13.0

CNA Affected

[
  {
    "vendor": "Samsung Mobile",
    "product": "Samsung Mobile Devices",
    "versions": [
      {
        "version": "Android 12, 13",
        "status": "affected",
        "lessThan": "SMR May-2023 Release 1",
        "versionType": "custom"
      }
    ]
  }
]

References

security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.6 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2023-21502

cvelist1 prion1 nvd1