Lucene search

[email protected]CVE-2023-30673

HistoryJul 06, 2023 - 3:15 a.m.

CVE-2023-30673

2023-07-0603:15:12

CWE-354

[email protected]

web.nvd.nist.gov

cve-2023-30673

smart switch pc

integrity check

vulnerability

local attackers

directory junction

nvd

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

5.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Improper validation of integrity check vulnerability in Smart Switch PC prior to version 4.3.23052_1 allows local attackers to delete arbitrary directory using directory junction.

Affected configurations

NVD

Node

samsungsmart_switch_pcRange<4.3.23052_1

CPENameOperatorVersion
samsung:smart_switch_pcsamsung smart switch pclt4.3.23052_1

CPE	Name	Operator	Version
samsung:smart_switch_pc	samsung smart switch pc	lt	4.3.23052_1

CNA Affected

[
  {
    "vendor": "Samsung Mobile",
    "product": "Smart Switch PC",
    "versions": [
      {
        "status": "unaffected",
        "version": "4.3.23052_1"
      }
    ],
    "defaultStatus": "affected"
  }
]

References

security.samsungmobile.com/serviceWeb.smsb?year=2023&month=07

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

5.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2023-30673

cvelist1 nvd1 prion1