7.8

CVE-2023-21445

Improper access control vulnerability in MyFiles prior to versions 12.2.09 in Android R(11), 13.1.03.501 in Android S(12) and 14.1.00.422 in Android T(13) allows local attacker to write file with MyFiles privilege via implicit intent.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Samsung ≫ Android Version 11.0 Update -
Samsung ≫ Android Version 11.0 Update smr-apr-2021-r1
Samsung ≫ Android Version 11.0 Update smr-apr-2022-r1
Samsung ≫ Android Version 11.0 Update smr-apr-2023-r1
Samsung ≫ Android Version 11.0 Update smr-aug-2021-r1
Samsung ≫ Android Version 11.0 Update smr-aug-2022-r1
Samsung ≫ Android Version 11.0 Update smr-aug-2023-r1
Samsung ≫ Android Version 11.0 Update smr-dec-2020-r1
Samsung ≫ Android Version 11.0 Update smr-dec-2021-r1
Samsung ≫ Android Version 11.0 Update smr-dec-2022-r1
Samsung ≫ Android Version 11.0 Update smr-dec-2023-r1
Samsung ≫ Android Version 11.0 Update smr-feb-2021-r1
Samsung ≫ Android Version 11.0 Update smr-feb-2022-r1
Samsung ≫ Android Version 11.0 Update smr-feb-2023-r1
Samsung ≫ Android Version 11.0 Update smr-jan-2021-r1
Samsung ≫ Android Version 11.0 Update smr-jan-2022-r1
Samsung ≫ Android Version 11.0 Update smr-jul-2021-r1
Samsung ≫ Android Version 11.0 Update smr-jul-2022-r1
Samsung ≫ Android Version 11.0 Update smr-jul-2023-r1
Samsung ≫ Android Version 11.0 Update smr-jun-2021-r1
Samsung ≫ Android Version 11.0 Update smr-jun-2022-r1
Samsung ≫ Android Version 11.0 Update smr-jun-2023-r1
Samsung ≫ Android Version 11.0 Update smr-mar-2021-r1
Samsung ≫ Android Version 11.0 Update smr-mar-2022-r1
Samsung ≫ Android Version 11.0 Update smr-mar-2023-r1
Samsung ≫ Android Version 11.0 Update smr-may-2021-r1
Samsung ≫ Android Version 11.0 Update smr-may-2022-r1
Samsung ≫ Android Version 11.0 Update smr-may-2023-r1
Samsung ≫ Android Version 11.0 Update smr-nov-2021-r1
Samsung ≫ Android Version 11.0 Update smr-nov-2022-r1
Samsung ≫ Android Version 11.0 Update smr-nov-2023-r1
Samsung ≫ Android Version 11.0 Update smr-oct-2021-r1
Samsung ≫ Android Version 11.0 Update smr-oct-2022-r1
Samsung ≫ Android Version 11.0 Update smr-oct-2023-r1
Samsung ≫ Android Version 11.0 Update smr-sep-2021-r1
Samsung ≫ Android Version 11.0 Update smr-sep-2022-r1
Samsung ≫ Android Version 11.0 Update smr-sep-2023-r1
Samsung ≫ Android Version 12.0 Update -
Samsung ≫ Android Version 12.0 Update smr-apr-2022-r1
Samsung ≫ Android Version 12.0 Update smr-apr-2023-r1
Samsung ≫ Android Version 12.0 Update smr-aug-2022-r1
Samsung ≫ Android Version 12.0 Update smr-aug-2023-r1
Samsung ≫ Android Version 12.0 Update smr-dec-2021-r1
Samsung ≫ Android Version 12.0 Update smr-dec-2022-r1
Samsung ≫ Android Version 12.0 Update smr-dec-2023-r1
Samsung ≫ Android Version 12.0 Update smr-feb-2022-r1
Samsung ≫ Android Version 12.0 Update smr-feb-2023-r1
Samsung ≫ Android Version 12.0 Update smr-jan-2022-r1
Samsung ≫ Android Version 12.0 Update smr-jul-2022-r1
Samsung ≫ Android Version 12.0 Update smr-jul-2023-r1
Samsung ≫ Android Version 12.0 Update smr-jun-2022-r1
Samsung ≫ Android Version 12.0 Update smr-jun-2023-r1
Samsung ≫ Android Version 12.0 Update smr-mar-2022-r1
Samsung ≫ Android Version 12.0 Update smr-mar-2023-r1
Samsung ≫ Android Version 12.0 Update smr-may-2022-r1
Samsung ≫ Android Version 12.0 Update smr-may-2023-r1
Samsung ≫ Android Version 12.0 Update smr-nov-2021-r1
Samsung ≫ Android Version 12.0 Update smr-nov-2022-r1
Samsung ≫ Android Version 12.0 Update smr-nov-2023-r1
Samsung ≫ Android Version 12.0 Update smr-oct-2022-r1
Samsung ≫ Android Version 12.0 Update smr-oct-2023-r1
Samsung ≫ Android Version 12.0 Update smr-sep-2022-r1
Samsung ≫ Android Version 12.0 Update smr-sep-2023-r1
Samsung ≫ Android Version 13.0 Update -
Samsung ≫ Android Version 13.0 Update smr-apr-2023-r1
Samsung ≫ Android Version 13.0 Update smr-aug-2023-r1
Samsung ≫ Android Version 13.0 Update smr-dec-2022-r1
Samsung ≫ Android Version 13.0 Update smr-dec-2023-r1
Samsung ≫ Android Version 13.0 Update smr-feb-2023-r1
Samsung ≫ Android Version 13.0 Update smr-jul-2023-r1
Samsung ≫ Android Version 13.0 Update smr-jun-2023-r1
Samsung ≫ Android Version 13.0 Update smr-mar-2023-r1
Samsung ≫ Android Version 13.0 Update smr-may-2023-r1
Samsung ≫ Android Version 13.0 Update smr-nov-2022-r1
Samsung ≫ Android Version 13.0 Update smr-nov-2023-r1
Samsung ≫ Android Version 13.0 Update smr-oct-2022-r1
Samsung ≫ Android Version 13.0 Update smr-oct-2023-r1
Samsung ≫ Android Version 13.0 Update smr-sep-2023-r1
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.19% 0.083
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
mobile.security@samsung.com 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

CWE-668 Exposure of Resource to Wrong Sphere

The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.

https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=02
Vendor Advisory