CVE-2023-21463

published 2023-03-16

CVE-2023-21463: Improper access control vulnerability in MyFiles application prior to versions 12.2.09.0 in Android 11, 13.1.03.501 in Android 12 and 14.1.03.0 in Android 13…

Priority P4 9 low 3.3 CVSS 3.1

AV L AC L PR L UI N S U C L I N A N

Improper access control vulnerability in MyFiles application prior to versions 12.2.09.0 in Android 11, 13.1.03.501 in Android 12 and 14.1.03.0 in Android 13 allows local attacker to get sensitive information of secret mode in Samsung Internet application with specific conditions.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
samsung	myfiles	< 12.2.09.0	12.2.09.0
samsung	myfiles	< 13.1.03.501	13.1.03.501
samsung	myfiles	< 14.1.03.0	14.1.03.0
samsung_mobile	myfiles	>= unspecified < 12.2.09.0 in Android 11, 13.1.03.501 in Android12 and 14.1.03.0 in Android 13	12.2.09.0 in Android 11, 13.1.03.501 in Android12 and 14.1.03.0 in Android 13

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-284