CVE-2023-21440 - Vulnerability Details

Vendors	Products
Samsung	Android

Link	Providers
https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=02

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2023-21440", "assignerOrgId": "3af57064-a867-422c-b2ad-40307b65c458", "assignerShortName": "Samsung Mobile", "dateUpdated": "2025-03-24T18:54:00.540Z", "dateReserved": "2022-11-14T00:00:00.000Z", "datePublished": "2023-02-09T00:00:00.000Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "3af57064-a867-422c-b2ad-40307b65c458", "shortName": "Samsung Mobile", "dateUpdated": "2023-02-09T00:00:00.000Z"}, "descriptions": [{"lang": "en", "value": "Improper access control vulnerability in WindowManagerService prior to SMR Feb-2023 Release 1 allows attackers to take a screen capture."}], "affected": [{"vendor": "Samsung Mobile", "product": "Samsung Mobile Devices", "versions": [{"version": "T(13)", "status": "affected", "lessThan": "SMR Feb-2023 Release 1", "versionType": "custom"}]}], "references": [{"url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=02"}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE", "baseScore": 6.2, "baseSeverity": "MEDIUM"}}], "problemTypes": [{"descriptions": [{"type": "CWE", "lang": "en", "description": "CWE-285 Improper Authorization", "cweId": "CWE-285"}]}], "source": {"discovery": "UNKNOWN"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T09:36:34.462Z"}, "title": "CVE Program Container", "references": [{"url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=02", "tags": ["x_transferred"]}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-03-24T18:53:57.666152Z", "id": "CVE-2023-21440", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-03-24T18:54:00.540Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

state : PUBLISHED (string)

cveId : CVE-2023-21440 (string)

assignerOrgId : 3af57064-a867-422c-b2ad-40307b65c458 (string)

assignerShortName : Samsung Mobile (string)

dateUpdated : 2025-03-24T18:54:00.540Z (string)

dateReserved : 2022-11-14T00:00:00.000Z (string)

datePublished : 2023-02-09T00:00:00.000Z (string)

}

containers : { »

cna : { »

providerMetadata : { »

orgId : 3af57064-a867-422c-b2ad-40307b65c458 (string)

shortName : Samsung Mobile (string)

dateUpdated : 2023-02-09T00:00:00.000Z (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : Improper access control vulnerability in WindowManagerService prior to SMR Feb-2023 Release 1 allows attackers to take a screen capture. (string)

}

]

affected : [ »

0 : { »

vendor : Samsung Mobile (string)

product : Samsung Mobile Devices (string)

versions : [ »

0 : { »

version : T(13) (string)

status : affected (string)

lessThan : SMR Feb-2023 Release 1 (string)

versionType : custom (string)

}

]

}

]

references : [ »

0 : { »

url : https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=02 (string)

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

version : 3.1 (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N (string)

attackVector : LOCAL (string)

attackComplexity : LOW (string)

privilegesRequired : NONE (string)

userInteraction : NONE (string)

scope : UNCHANGED (string)

confidentialityImpact : HIGH (string)

integrityImpact : NONE (string)

availabilityImpact : NONE (string)

baseScore : 6.2 (number)

baseSeverity : MEDIUM (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

type : CWE (string)

lang : en (string)

description : CWE-285 Improper Authorization (string)

cweId : CWE-285 (string)

}

]

}

]

source : { »

discovery : UNKNOWN (string)

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T09:36:34.462Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=02 (string)

tags : [ »

0 : x_transferred (string)

]

}

]

}

1 : { »

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2025-03-24T18:53:57.666152Z (string)

id : CVE-2023-21440 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-03-24T18:54:00.540Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=02", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T09:36:34.462Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-21440", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-03-24T18:53:57.666152Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-03-24T18:53:53.808Z"}}], "cna": {"source": {"discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.2, "attackVector": "LOCAL", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "Samsung Mobile", "product": "Samsung Mobile Devices", "versions": [{"status": "affected", "version": "T(13)", "lessThan": "SMR Feb-2023 Release 1", "versionType": "custom"}]}], "references": [{"url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=02"}], "descriptions": [{"lang": "en", "value": "Improper access control vulnerability in WindowManagerService prior to SMR Feb-2023 Release 1 allows attackers to take a screen capture."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-285", "description": "CWE-285 Improper Authorization"}]}], "providerMetadata": {"orgId": "3af57064-a867-422c-b2ad-40307b65c458", "shortName": "Samsung Mobile", "dateUpdated": "2023-02-09T00:00:00.000Z"}}}, "cveMetadata": {"cveId": "CVE-2023-21440", "state": "PUBLISHED", "dateUpdated": "2025-03-24T18:54:00.540Z", "dateReserved": "2022-11-14T00:00:00.000Z", "assignerOrgId": "3af57064-a867-422c-b2ad-40307b65c458", "datePublished": "2023-02-09T00:00:00.000Z", "assignerShortName": "Samsung Mobile"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=02 (string)

tags : [ »

0 : x_transferred (string)

]

}

]

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T09:36:34.462Z (string)

}

1 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2023-21440 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : partial (string)

}

]

version : 2.0.3 (string)

timestamp : 2025-03-24T18:53:57.666152Z (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-03-24T18:53:53.808Z (string)

}

]

cna : { »

source : { »

discovery : UNKNOWN (string)

}

metrics : [ »

0 : { »

cvssV3_1 : { »

scope : UNCHANGED (string)

version : 3.1 (string)

baseScore : 6.2 (number)

attackVector : LOCAL (string)

baseSeverity : MEDIUM (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N (string)

integrityImpact : NONE (string)

userInteraction : NONE (string)

attackComplexity : LOW (string)

availabilityImpact : NONE (string)

privilegesRequired : NONE (string)

confidentialityImpact : HIGH (string)

}

]

affected : [ »

0 : { »

vendor : Samsung Mobile (string)

product : Samsung Mobile Devices (string)

versions : [ »

0 : { »

status : affected (string)

version : T(13) (string)

lessThan : SMR Feb-2023 Release 1 (string)

versionType : custom (string)

}

]

}

]

references : [ »

0 : { »

url : https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=02 (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Improper access control vulnerability in WindowManagerService prior to SMR Feb-2023 Release 1 allows attackers to take a screen capture. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-285 (string)

description : CWE-285 Improper Authorization (string)

}

]

}

]

providerMetadata : { »

orgId : 3af57064-a867-422c-b2ad-40307b65c458 (string)

shortName : Samsung Mobile (string)

dateUpdated : 2023-02-09T00:00:00.000Z (string)

}

cveMetadata : { »

cveId : CVE-2023-21440 (string)

state : PUBLISHED (string)

dateUpdated : 2025-03-24T18:54:00.540Z (string)

dateReserved : 2022-11-14T00:00:00.000Z (string)

assignerOrgId : 3af57064-a867-422c-b2ad-40307b65c458 (string)

datePublished : 2023-02-09T00:00:00.000Z (string)

assignerShortName : Samsung Mobile (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:samsung:android:13.0:-:*:*:*:*:*:*", "matchCriteriaId": "A123EDB1-3048-44B0-8D4D-39A2B24B5F6B", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:13.0:smr-apr-2023-r1:*:*:*:*:*:*", "matchCriteriaId": "70825981-F895-4BFD-9B6E-92BFF0D67023", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:13.0:smr-aug-2023-r1:*:*:*:*:*:*", "matchCriteriaId": "88DC0A82-CAF3-4E88-8A4D-8AF79D0C226D", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:13.0:smr-dec-2022-r1:*:*:*:*:*:*", "matchCriteriaId": "299284DA-85AB-4162-B858-E67E5C6C14F7", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:13.0:smr-dec-2023-r1:*:*:*:*:*:*", "matchCriteriaId": "38B7AB56-AB65-4557-A91C-40CA2FD12351", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:13.0:smr-feb-2023-r1:*:*:*:*:*:*", "matchCriteriaId": "D98F307E-3B01-4C17-86E5-1C6299919417", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:13.0:smr-jul-2023-r1:*:*:*:*:*:*", "matchCriteriaId": "34114DDC-DCDA-4306-8D23-2E628873171F", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:13.0:smr-jun-2023-r1:*:*:*:*:*:*", "matchCriteriaId": "85E4E8C1-749F-4A1C-8333-6BAFBF8B64D1", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:13.0:smr-mar-2023-r1:*:*:*:*:*:*", "matchCriteriaId": "5F73D594-178F-4FC8-9F40-0E545E2647B0", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:13.0:smr-may-2023-r1:*:*:*:*:*:*", "matchCriteriaId": "3F3EF3F1-4E54-46E3-A308-69656A29FBD2", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:13.0:smr-nov-2022-r1:*:*:*:*:*:*", "matchCriteriaId": "D2B24866-2B3A-4A1A-8B75-EF7A7541797A", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:13.0:smr-nov-2023-r1:*:*:*:*:*:*", "matchCriteriaId": "3D30C02C-91FB-4D29-AF49-7903158E8FEB", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:13.0:smr-oct-2022-r1:*:*:*:*:*:*", "matchCriteriaId": "EBB29F18-A929-432B-B20C-365401E6CA12", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:13.0:smr-oct-2023-r1:*:*:*:*:*:*", "matchCriteriaId": "2B6D9064-844B-4D3F-AAE4-D170DF45EF8D", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:13.0:smr-sep-2023-r1:*:*:*:*:*:*", "matchCriteriaId": "C581B7EE-CD08-4D6E-8858-EA8FA631F84C", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Improper access control vulnerability in WindowManagerService prior to SMR Feb-2023 Release 1 allows attackers to take a screen capture."}], "id": "CVE-2023-21440", "lastModified": "2024-11-21T07:42:52.387", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 6.2, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 2.5, "impactScore": 3.6, "source": "mobile.security@samsung.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2023-02-09T19:15:16.373", "references": [{"source": "mobile.security@samsung.com", "tags": ["Vendor Advisory"], "url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=02"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=02"}], "sourceIdentifier": "mobile.security@samsung.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-285"}], "source": "mobile.security@samsung.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-829"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:samsung:android:13.0:-:*:*:*:*:*:* (string)

matchCriteriaId : A123EDB1-3048-44B0-8D4D-39A2B24B5F6B (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:o:samsung:android:13.0:smr-apr-2023-r1:*:*:*:*:*:* (string)

matchCriteriaId : 70825981-F895-4BFD-9B6E-92BFF0D67023 (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:o:samsung:android:13.0:smr-aug-2023-r1:*:*:*:*:*:* (string)

matchCriteriaId : 88DC0A82-CAF3-4E88-8A4D-8AF79D0C226D (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:o:samsung:android:13.0:smr-dec-2022-r1:*:*:*:*:*:* (string)

matchCriteriaId : 299284DA-85AB-4162-B858-E67E5C6C14F7 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:o:samsung:android:13.0:smr-dec-2023-r1:*:*:*:*:*:* (string)

matchCriteriaId : 38B7AB56-AB65-4557-A91C-40CA2FD12351 (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:o:samsung:android:13.0:smr-feb-2023-r1:*:*:*:*:*:* (string)

matchCriteriaId : D98F307E-3B01-4C17-86E5-1C6299919417 (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:o:samsung:android:13.0:smr-jul-2023-r1:*:*:*:*:*:* (string)

matchCriteriaId : 34114DDC-DCDA-4306-8D23-2E628873171F (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:o:samsung:android:13.0:smr-jun-2023-r1:*:*:*:*:*:* (string)

matchCriteriaId : 85E4E8C1-749F-4A1C-8333-6BAFBF8B64D1 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:o:samsung:android:13.0:smr-mar-2023-r1:*:*:*:*:*:* (string)

matchCriteriaId : 5F73D594-178F-4FC8-9F40-0E545E2647B0 (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:o:samsung:android:13.0:smr-may-2023-r1:*:*:*:*:*:* (string)

matchCriteriaId : 3F3EF3F1-4E54-46E3-A308-69656A29FBD2 (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:o:samsung:android:13.0:smr-nov-2022-r1:*:*:*:*:*:* (string)

matchCriteriaId : D2B24866-2B3A-4A1A-8B75-EF7A7541797A (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:o:samsung:android:13.0:smr-nov-2023-r1:*:*:*:*:*:* (string)

matchCriteriaId : 3D30C02C-91FB-4D29-AF49-7903158E8FEB (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:o:samsung:android:13.0:smr-oct-2022-r1:*:*:*:*:*:* (string)

matchCriteriaId : EBB29F18-A929-432B-B20C-365401E6CA12 (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:o:samsung:android:13.0:smr-oct-2023-r1:*:*:*:*:*:* (string)

matchCriteriaId : 2B6D9064-844B-4D3F-AAE4-D170DF45EF8D (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:o:samsung:android:13.0:smr-sep-2023-r1:*:*:*:*:*:* (string)

matchCriteriaId : C581B7EE-CD08-4D6E-8858-EA8FA631F84C (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Improper access control vulnerability in WindowManagerService prior to SMR Feb-2023 Release 1 allows attackers to take a screen capture. (string)

}

]

id : CVE-2023-21440 (string)

lastModified : 2024-11-21T07:42:52.387 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : NONE (string)

baseScore : 6.2 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : HIGH (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 2.5 (number)

impactScore : 3.6 (number)

source : mobile.security@samsung.com (string)

type : Secondary (string)

}

1 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : NONE (string)

baseScore : 5.5 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : HIGH (string)

integrityImpact : NONE (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : REQUIRED (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N (string)

version : 3.1 (string)

}

exploitabilityScore : 1.8 (number)

impactScore : 3.6 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2023-02-09T19:15:16.373 (string)

references : [ »

0 : { »

source : mobile.security@samsung.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=02 (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=02 (string)

}

]

sourceIdentifier : mobile.security@samsung.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-285 (string)

}

]

source : mobile.security@samsung.com (string)

type : Secondary (string)

}

1 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-829 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

Exploitation none

Automatable no

Technical Impact partial

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object