CVE-2023-31116

EPSS 0.62%
Veröffentlicht 07.06.2023 21:15:13
Zuletzt bearbeitet 07.01.2025 15:15:07
Erkennungen
Login

An issue was discovered in the Shannon RCS component in Samsung Exynos Modem 5123 and 5300. An incorrect default permission can cause unintended querying of RCS capability via a crafted application.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

NVD 2 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Samsung ≫ Exynos 5123 Firmware Version -

Samsung ≫ Exynos 5123 Version -

Samsung ≫ Exynos 5300 Firmware Version -

Samsung ≫ Exynos 5300 Version -

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.62%	0.45

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA-ADP	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE-276 Incorrect Default Permissions

During installation, installed file permissions are set to allow anyone to modify those files.

https://semiconductor.samsung.com/support/quality-support/product-security-updates/

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2023-31116

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-31116

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-31116

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2023-31116