7.8
CVE-2023-30738
- EPSS 0.05%
- Published 04.10.2023 04:15:13
- Last modified 21.11.2024 08:00:48
- Source mobile.security@samsung.com
- Teams watchlist Login
- Open Login
An improper input validation in UEFI Firmware prior to Firmware update Oct-2023 Release in Galaxy Book, Galaxy Book Pro, Galaxy Book Pro 360 and Galaxy Book Odyssey allows local attacker to execute SMM memory corruption.
Data is provided by the National Vulnerability Database (NVD)
Samsung ≫ Galaxy Book Firmware Version < oct-2023
Samsung ≫ Galaxy Book Pro Firmware Version < oct-2023
Samsung ≫ Galaxy Book Pro 360 Firmware Version < oct-2023
Samsung ≫ Galaxy Book Odyssey Firmware Version < oct-2023
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.05% | 0.16 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 7.8 | 1.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
| mobile.security@samsung.com | 5.5 | 1.8 | 3.6 |
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
|