CVE-2023-42551
- State
- Published
- Severity
- 5.5 Medium
- Published
- Nov 7, 2023
- Updated
- Sep 12, 2024
- Reserved
- Sep 11, 2023
Description
Use of implicit intent for sensitive communication vulnerability in startTncActivity in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 5.5 Medium | CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N | Samsung Mobile |
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
Samsung AccountSamsung Mobile |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.