7.5

CVE-2023-42545

Use of implicit intent for sensitive communication vulnerability in Phone prior to versions 12.7.20.12 in Android 11, 13.1.48, 13.5.28 in Android 12, and 14.7.38 in Android 13 allows attackers to access location data.

Data is provided by the National Vulnerability Database (NVD)
Samsung ≫ Phone Version < 12.7.20.12
   Samsung ≫ Android Version11.0 Update-
Samsung ≫ Phone Version < 13.1.48
   Samsung ≫ Android Version12.0 Update-
Samsung ≫ Phone Version >= 13.5.0 < 13.5.28
   Samsung ≫ Android Version12.0 Update-
Samsung ≫ Phone Version < 14.7.38
   Samsung ≫ Android Version13.0 Update-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.26% 0.49
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.5 3.9 3.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
mobile.security@samsung.com 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N