Lucene search

[email protected]CVE-2023-42565

HistoryDec 05, 2023 - 3:15 a.m.

CVE-2023-42565

2023-12-0503:15:16

[email protected]

web.nvd.nist.gov

cve-2023-42565

improper input validation

smart clip

smr dec-2023 release 1

local attackers

arbitrary code

7.3 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:H

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Improper input validation vulnerability in Smart Clip prior to SMR Dec-2023 Release 1 allows local attackers with shell privilege to execute arbitrary code.

Affected configurations

NVD

Node

samsungandroidRange13.0–14.0

samsungandroidMatch14.0-

samsungandroidMatch14.0smr-apr-2023-r1

samsungandroidMatch14.0smr-aug-2023-r1

samsungandroidMatch14.0smr-dec-2022-r1

samsungandroidMatch14.0smr-feb-2023-r1

samsungandroidMatch14.0smr-jan-2023-r1

samsungandroidMatch14.0smr-jul-2023-r1

samsungandroidMatch14.0smr-jun-2023-r1

samsungandroidMatch14.0smr-mar-2023-r1

samsungandroidMatch14.0smr-may-2023-r1

samsungandroidMatch14.0smr-nov-2022-r1

samsungandroidMatch14.0smr-nov-2023-r1

samsungandroidMatch14.0smr-oct-2022-r1

samsungandroidMatch14.0smr-oct-2023-r1

samsungandroidMatch14.0smr-sep-2023-r1

CPENameOperatorVersion
samsung:androidsamsung androidlt14.0

CPE	Name	Operator	Version
samsung:android	samsung android	lt	14.0

CNA Affected

[
  {
    "vendor": "Samsung Mobile",
    "product": "Samsung Mobile Devices",
    "versions": [
      {
        "status": "unaffected",
        "version": "SMR Dec-2023 Release in Android 13, 14"
      }
    ],
    "defaultStatus": "affected"
  }
]

References

security.samsungmobile.com/securityUpdate.smsb?year=2023&month=12

7.3 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:H

6.7 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2023-42565

nvd1 prion1 cvelist1