CVE-2023-30727

State
Published
Severity
6.7 Medium
Published
Oct 4, 2023
Updated
Sep 19, 2024
Reserved
Apr 14, 2023

Read the record on cve.org

Description

Improper access control vulnerability in SecSettings prior to SMR Oct-2023 Release 1 allows attackers to enable Wi-Fi and connect arbitrary Wi-Fi without User Interaction.

Scores

CVSSScoreVectorSource
3.16.7 MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:HSamsung Mobile

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
Samsung Mobile DevicesSamsung Mobile
  • SMR Oct-2023 Release in Android 11, 12, 13Not affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.