Authorization

2023-10-0404:15:00

PRIOn knowledge base

www.prio-n.com

samsung assistant

pushmsgreceiver

improper authorization

vulnerability

user interaction

5.7 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.1%

JSON

Improper authorization in PushMsgReceiver of Samsung Assistant prior to version 8.7.00.1 allows attacker to execute javascript interface. To trigger this vulnerability, user interaction is required.

CPENameOperatorVersion
samsung_assistantlt8.7.00.1

CPE	Name	Operator	Version
	samsung_assistant	lt	8.7.00.1

References

security.samsungmobile.com/serviceWeb.smsb?year=2023&month=10