CVE-2023-42552

EPSS 0.07%
Published 07.11.2023 08:15:23
Last modified 21.11.2024 08:22:46
Source mobile.security@samsung.com
Teams watchlist Login
Open Login

Implicit intent hijacking vulnerability in Firewall application prior to versions 12.1.00.24 in Android 11, 13.1.00.16 in Android 12 and 14.1.00.7 in Android 13 allows 3rd party application to tamper the database of Firewall.

Affected products Warnungen 0 Metrics 3 CWE 0 References 4

Data is provided by the National Vulnerability Database (NVD)

Samsung ≫ Firewall Version < 12.1.00.24

Samsung ≫ Android Version11.0 Update-

Samsung ≫ Firewall Version < 13.1.00.16

Samsung ≫ Android Version12.0 Update-

Samsung ≫ Firewall Version < 14.1.00.7

Samsung ≫ Android Version13.0 Update-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.07%	0.226

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	3.3	1.8	1.4	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
mobile.security@samsung.com	4.4	1.8	2.5	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L

https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=11

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2023-42552

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-42552

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-42552

EUVD