CVE-2023-21464

EPSS 0.04%
Published 16.03.2023 21:15:12
Last modified 21.11.2024 07:42:55
Source mobile.security@samsung.com
Teams watchlist Login
Open Login

Improper access control in Samsung Calendar prior to versions 12.4.02.9000 in Android 13 and 12.3.08.2000 in Android 12 allows local attacker to configure improper status.

Affected products Warnungen 0 Metrics 3 CWE 1 References 4

Data is provided by the National Vulnerability Database (NVD)

Samsung ≫ Calendar Version < 12.4.02.9000

Google ≫ Android Version13.0

Samsung ≫ Calendar Version < 12.3.08.2000

Google ≫ Android Version12.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.04%	0.087

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	3.3	1.8	1.4	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
mobile.security@samsung.com	4	2.5	1.4	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

CWE-281 Improper Preservation of Permissions

The product does not preserve permissions or incorrectly preserves permissions when copying, restoring, or sharing objects, which can cause them to have less restrictive permissions than intended.

https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=03

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2023-21464

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-21464

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-21464

EUVD