CVE-2023-42531 — Improper Authentication in Samsung Android

CWE-287 — Improper Authentication3 documents3 sources
Severity
7.1HIGHNVD
CNA6.2
EPSS
0.0%
top 94.49%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Samsung Android
Timeline
PublishedNov 7
Latest updateNov 13

Description

Improper access control vulnerability in SmsController prior to SMR Nov-2023 Release1 allows local attackers to bypass restrictions on starting activities from the background.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:HExploitability: 1.8 | Impact: 5.2

Affected Packages1 packages

▶NVDsamsung/android11.0, 12.0, 13.0+2

🔴Vulnerability Details

2
GHSA
GHSA-5cwm-xw7v-fmp2: Improper access control vulnerability in SmsController prior to SMR Nov-2023 Release1 allows attacker to bypass restrictions on starting activities fr↗2023-11-13
▶
CVEList
CVE-2023-42531: Improper access control vulnerability in SmsController prior to SMR Nov-2023 Release1 allows local attackers to bypass restrictions on starting activi↗2023-11-07
▶
CVE-2023-42531 — Improper Authentication in Samsung | cvebase