Lucene search

K
nvd[email protected]NVD:CVE-2023-42552
HistoryNov 07, 2023 - 8:15 a.m.

CVE-2023-42552

2023-11-0708:15:23
web.nvd.nist.gov
6
cve-2023-42552
implicit intent hijacking
3rd party application
firewall database tampering
android 11
android 12
android 13

CVSS3

3.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

AI Score

4.6

Confidence

High

EPSS

0

Percentile

12.7%

Implicit intent hijacking vulnerability in Firewall application prior to versions 12.1.00.24 in Android 11, 13.1.00.16 in Android 12 and 14.1.00.7 in Android 13 allows 3rd party application to tamper the database of Firewall.

Affected configurations

Nvd
Node
samsungfirewallRange<12.1.00.24
AND
samsungandroidMatch11.0-
Node
samsungfirewallRange<13.1.00.16
AND
samsungandroidMatch12.0-
Node
samsungfirewallRange<14.1.00.7
AND
samsungandroidMatch13.0-
VendorProductVersionCPE
samsungfirewall*cpe:2.3:a:samsung:firewall:*:*:*:*:*:*:*:*
samsungandroid11.0cpe:2.3:o:samsung:android:11.0:-:*:*:*:*:*:*
samsungandroid12.0cpe:2.3:o:samsung:android:12.0:-:*:*:*:*:*:*
samsungandroid13.0cpe:2.3:o:samsung:android:13.0:-:*:*:*:*:*:*

CVSS3

3.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

AI Score

4.6

Confidence

High

EPSS

0

Percentile

12.7%

Related for NVD:CVE-2023-42552