CVE-2023-31115

EPSS 0.49%
Veröffentlicht 07.06.2023 21:15:13
Zuletzt bearbeitet 07.01.2025 15:15:07
Erkennungen
Login

An issue was discovered in the Shannon RCS component in Samsung Exynos Modem 5123 and 5300. Incorrect resource transfer between spheres can cause changes to the activation mode of RCS via a crafted application.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

NVD 2 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Samsung ≫ Exynos 5123 Firmware Version -

Samsung ≫ Exynos 5123 Version -

Samsung ≫ Exynos 5300 Firmware Version -

Samsung ≫ Exynos 5300 Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.49%	0.379

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CISA-ADP	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CWE-669 Incorrect Resource Transfer Between Spheres

The product does not properly transfer a resource/behavior to another sphere, or improperly imports a resource/behavior from another sphere, in a manner that provides unintended control over that resource.

https://semiconductor.samsung.com/support/quality-support/product-security-updates/

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2023-31115

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-31115

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-31115

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2023-31115