CVE-2023-21462

State: Published
Severity: 4.2 Medium
Published: Mar 16, 2023
Updated: Aug 2, 2024
Reserved: Nov 14, 2022

Description

The sensitive information exposure vulnerability in Quick Share Agent prior to versions 3.5.14.18 in Android 12 and 3.5.16.20 in Android 13 allows to local attacker to access MAC address without related permission.

Scores

CVSS	Score	Vector	Source
3.1	4.2 Medium	CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N	Samsung Mobile

Weaknesses

CWE-215 Insertion of Sensitive Information Into Debugging Code

Affected Products

Product	Versions
Quick Share AgentSamsung Mobile	before 3.5.14.18 in Android 12 and 3.5.16.20 in Android 13Affected

References

https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=03

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.