CVE-2023-21424

Published Feb 9, 2023 CVSS 3.1 · 5.1 Medium EPSS < 1% KEV · Not listed
Description
Improper Handling of Insufficient Permissions or Privileges vulnerability in SemChameleonHelper prior to SMR Jan-2023 Release 1 allows attacker to modify network related values, network code, carrier id and operator brand.

Analysis

No analysis available yet

Remediation

No remediation available yet

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2023-25592 Improper Handling of Insufficient Permissions or Privileges vulnerability in SemChameleonHelper prior to SMR Jan-2023 Release 1 allows attacker to modify network related values, network code, carrier id and operator brand.
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
Samsung Mobile
Published
Updated
Mar 24, 2025, 7:51 PM
Reserved
Nov 14, 2022, 12:00 AM
Status
Modified
Published
Feb 9, 2023, 7:15 PM
Modified
Jun 17, 2026, 5:32 AM