CVE-2023-30680 - Vulnerability Details

Vendors	Products
Samsung	Android
Samsung Mobile	Samsung Mobile Devices

Link	Providers
https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=08

Type	Values Removed	Values Added
First Time appeared		Samsung Mobile Samsung Mobile samsung Mobile Devices
Weaknesses		CWE-266
CPEs		cpe:2.3:a:samsung_mobile:samsung_mobile_devices::::::::
Vendors & Products		Samsung Mobile Samsung Mobile samsung Mobile Devices
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-30680", "assignerOrgId": "3af57064-a867-422c-b2ad-40307b65c458", "state": "PUBLISHED", "assignerShortName": "Samsung Mobile", "dateReserved": "2023-04-14T01:59:51.121Z", "datePublished": "2023-08-10T01:18:23.078Z", "dateUpdated": "2024-10-10T17:26:38.288Z"}, "containers": {"cna": {"problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-269: Improper Privilege Management"}]}], "affected": [{"vendor": "Samsung Mobile", "product": "Samsung Mobile Devices", "versions": [{"status": "unaffected", "version": "SMR Aug-2023 Release 1"}], "defaultStatus": "affected"}], "descriptions": [{"lang": "en", "value": "Improper privilege management vulnerability in MMIGroup prior to SMR Aug-2023 Release 1 allows code execution with privilege."}], "references": [{"url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=08"}], "metrics": [{"format": "CVSS", "cvssV3_1": {"version": "3.1", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseSeverity": "HIGH", "baseScore": 8.4, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}}], "providerMetadata": {"orgId": "3af57064-a867-422c-b2ad-40307b65c458", "shortName": "Samsung Mobile", "dateUpdated": "2023-08-10T01:18:23.078Z"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T14:28:52.161Z"}, "title": "CVE Program Container", "references": [{"url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=08", "tags": ["x_transferred"]}]}, {"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-266", "lang": "en", "description": "CWE-266 Incorrect Privilege Assignment"}]}], "affected": [{"vendor": "samsung_mobile", "product": "samsung_mobile_devices", "cpes": ["cpe:2.3:a:samsung_mobile:samsung_mobile_devices:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "SMR_Aug-2023_Release 1", "status": "affected"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-10-10T17:24:52.301470Z", "id": "CVE-2023-30680", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-10T17:26:38.288Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2023-30680 (string)

assignerOrgId : 3af57064-a867-422c-b2ad-40307b65c458 (string)

state : PUBLISHED (string)

assignerShortName : Samsung Mobile (string)

dateReserved : 2023-04-14T01:59:51.121Z (string)

datePublished : 2023-08-10T01:18:23.078Z (string)

dateUpdated : 2024-10-10T17:26:38.288Z (string)

}

containers : { »

cna : { »

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

description : CWE-269: Improper Privilege Management (string)

}

]

}

]

affected : [ »

0 : { »

vendor : Samsung Mobile (string)

product : Samsung Mobile Devices (string)

versions : [ »

0 : { »

status : unaffected (string)

version : SMR Aug-2023 Release 1 (string)

}

]

defaultStatus : affected (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Improper privilege management vulnerability in MMIGroup prior to SMR Aug-2023 Release 1 allows code execution with privilege. (string)

}

]

references : [ »

0 : { »

url : https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=08 (string)

}

]

metrics : [ »

0 : { »

format : CVSS (string)

cvssV3_1 : { »

version : 3.1 (string)

attackVector : LOCAL (string)

attackComplexity : LOW (string)

privilegesRequired : NONE (string)

userInteraction : NONE (string)

scope : UNCHANGED (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

availabilityImpact : HIGH (string)

baseSeverity : HIGH (string)

baseScore : 8.4 (number)

vectorString : CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (string)

}

]

providerMetadata : { »

orgId : 3af57064-a867-422c-b2ad-40307b65c458 (string)

shortName : Samsung Mobile (string)

dateUpdated : 2023-08-10T01:18:23.078Z (string)

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T14:28:52.161Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=08 (string)

tags : [ »

0 : x_transferred (string)

]

}

]

}

1 : { »

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

type : CWE (string)

cweId : CWE-266 (string)

lang : en (string)

description : CWE-266 Incorrect Privilege Assignment (string)

}

]

}

]

affected : [ »

0 : { »

vendor : samsung_mobile (string)

product : samsung_mobile_devices (string)

cpes : [ »

0 : cpe:2.3:a:samsung_mobile:samsung_mobile_devices:*:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : SMR_Aug-2023_Release 1 (string)

status : affected (string)

}

]

}

]

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2024-10-10T17:24:52.301470Z (string)

id : CVE-2023-30680 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-10-10T17:26:38.288Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-30680", "assignerOrgId": "3af57064-a867-422c-b2ad-40307b65c458", "state": "PUBLISHED", "assignerShortName": "Samsung Mobile", "dateReserved": "2023-04-14T01:59:51.121Z", "datePublished": "2023-08-10T01:18:23.078Z", "dateUpdated": "2024-10-10T17:26:38.288Z"}, "containers": {"cna": {"problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-269: Improper Privilege Management"}]}], "affected": [{"vendor": "Samsung Mobile", "product": "Samsung Mobile Devices", "versions": [{"status": "unaffected", "version": "SMR Aug-2023 Release 1"}], "defaultStatus": "affected"}], "descriptions": [{"lang": "en", "value": "Improper privilege management vulnerability in MMIGroup prior to SMR Aug-2023 Release 1 allows code execution with privilege."}], "references": [{"url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=08"}], "metrics": [{"format": "CVSS", "cvssV3_1": {"version": "3.1", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseSeverity": "HIGH", "baseScore": 8.4, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}}], "providerMetadata": {"orgId": "3af57064-a867-422c-b2ad-40307b65c458", "shortName": "Samsung Mobile", "dateUpdated": "2023-08-10T01:18:23.078Z"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T14:28:52.161Z"}, "title": "CVE Program Container", "references": [{"url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=08", "tags": ["x_transferred"]}]}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-30680", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-10-10T17:24:52.301470Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:samsung_mobile:samsung_mobile_devices:*:*:*:*:*:*:*:*"], "vendor": "samsung_mobile", "product": "samsung_mobile_devices", "versions": [{"status": "affected", "version": "SMR_Aug-2023_Release 1"}], "defaultStatus": "unknown"}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-266", "description": "CWE-266 Incorrect Privilege Assignment"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-10T17:26:32.510Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2023-30680 (string)

assignerOrgId : 3af57064-a867-422c-b2ad-40307b65c458 (string)

state : PUBLISHED (string)

assignerShortName : Samsung Mobile (string)

dateReserved : 2023-04-14T01:59:51.121Z (string)

datePublished : 2023-08-10T01:18:23.078Z (string)

dateUpdated : 2024-10-10T17:26:38.288Z (string)

}

containers : { »

cna : { »

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

description : CWE-269: Improper Privilege Management (string)

}

]

}

]

affected : [ »

0 : { »

vendor : Samsung Mobile (string)

product : Samsung Mobile Devices (string)

versions : [ »

0 : { »

status : unaffected (string)

version : SMR Aug-2023 Release 1 (string)

}

]

defaultStatus : affected (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Improper privilege management vulnerability in MMIGroup prior to SMR Aug-2023 Release 1 allows code execution with privilege. (string)

}

]

references : [ »

0 : { »

url : https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=08 (string)

}

]

metrics : [ »

0 : { »

format : CVSS (string)

cvssV3_1 : { »

version : 3.1 (string)

attackVector : LOCAL (string)

attackComplexity : LOW (string)

privilegesRequired : NONE (string)

userInteraction : NONE (string)

scope : UNCHANGED (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

availabilityImpact : HIGH (string)

baseSeverity : HIGH (string)

baseScore : 8.4 (number)

vectorString : CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (string)

}

]

providerMetadata : { »

orgId : 3af57064-a867-422c-b2ad-40307b65c458 (string)

shortName : Samsung Mobile (string)

dateUpdated : 2023-08-10T01:18:23.078Z (string)

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T14:28:52.161Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=08 (string)

tags : [ »

0 : x_transferred (string)

]

}

]

}

1 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2023-30680 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

version : 2.0.3 (string)

timestamp : 2024-10-10T17:24:52.301470Z (string)

}

]

affected : [ »

0 : { »

cpes : [ »

0 : cpe:2.3:a:samsung_mobile:samsung_mobile_devices:*:*:*:*:*:*:*:* (string)

]

vendor : samsung_mobile (string)

product : samsung_mobile_devices (string)

versions : [ »

0 : { »

status : affected (string)

version : SMR_Aug-2023_Release 1 (string)

}

]

defaultStatus : unknown (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-266 (string)

description : CWE-266 Incorrect Privilege Assignment (string)

}

]

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-10-10T17:26:32.510Z (string)

}

]

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:samsung:android:12.0:-:*:*:*:*:*:*", "matchCriteriaId": "D757450C-270E-4FB2-A50C-7F769FED558A", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:12.0:smr-apr-2022-r1:*:*:*:*:*:*", "matchCriteriaId": "EC4A2EBA-038B-44D5-84F3-FF326CD1C62D", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:12.0:smr-apr-2023-r1:*:*:*:*:*:*", "matchCriteriaId": "40EB3FC1-D79A-40C7-9E2B-573E20780982", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:12.0:smr-aug-2022-r1:*:*:*:*:*:*", "matchCriteriaId": "0ABFBBDB-E935-4C54-865A-0E607497DA87", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:12.0:smr-dec-2021-r1:*:*:*:*:*:*", "matchCriteriaId": "3899E3E7-1284-4223-A258-DA691F5D62FE", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:12.0:smr-dec-2022-r1:*:*:*:*:*:*", "matchCriteriaId": "ECD961EA-6881-4A14-83DE-C6972F6F681C", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:12.0:smr-feb-2022-r1:*:*:*:*:*:*", "matchCriteriaId": "011CC4F5-6701-41E9-BC7D-CFE6EFF682AC", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:12.0:smr-feb-2023-r1:*:*:*:*:*:*", "matchCriteriaId": "13E145E2-CE11-4EE5-9085-B4960FE4F52F", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:12.0:smr-jan-2022-r1:*:*:*:*:*:*", "matchCriteriaId": "A3BBC8B6-1D2B-47C9-93EE-3D3DC43062F1", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:12.0:smr-jan-2023-r1:*:*:*:*:*:*", "matchCriteriaId": "02600CDD-6862-4146-88E8-A2E73B7ED534", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:12.0:smr-jul-2022-r1:*:*:*:*:*:*", "matchCriteriaId": "35F40D59-034B-44FB-8DCD-D469B50DE7E1", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:12.0:smr-jul-2023-r1:*:*:*:*:*:*", "matchCriteriaId": "CC84021B-9846-40FB-834B-7C5BECEFFEAC", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:12.0:smr-jun-2022-r1:*:*:*:*:*:*", "matchCriteriaId": "BC3F8572-578B-4D19-9453-1D03DA55EF70", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:12.0:smr-jun-2023-r1:*:*:*:*:*:*", "matchCriteriaId": "EEABF42E-578E-4689-B80D-B305467AA72D", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:12.0:smr-mar-2022-r1:*:*:*:*:*:*", "matchCriteriaId": "9137C66C-4966-4C90-ABE9-7E22F7E29BA7", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:12.0:smr-mar-2023-r1:*:*:*:*:*:*", "matchCriteriaId": "E261C9D8-1E74-44B8-9F11-F5769CF8B7FD", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:12.0:smr-may-2022-r1:*:*:*:*:*:*", "matchCriteriaId": "18CD523B-530E-4187-8BFF-729CDAC69282", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:12.0:smr-may-2023-r1:*:*:*:*:*:*", "matchCriteriaId": "4C28D3CD-DD34-4334-B03F-794B31A4BF48", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:12.0:smr-nov-2021-r1:*:*:*:*:*:*", "matchCriteriaId": "5A81C86D-F1FE-4166-8F37-D7170E6B30FE", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:12.0:smr-nov-2022-r1:*:*:*:*:*:*", "matchCriteriaId": "A3D80783-523A-455E-B1AD-0961086F79E6", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:12.0:smr-oct-2022-r1:*:*:*:*:*:*", "matchCriteriaId": "89BE2958-0BEE-4CFD-A0BA-494DE62E7F32", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:12.0:smr-sep-2022-r1:*:*:*:*:*:*", "matchCriteriaId": "B0329C50-B904-480D-8EBB-F2757049FC81", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:13.0:-:*:*:*:*:*:*", "matchCriteriaId": "A123EDB1-3048-44B0-8D4D-39A2B24B5F6B", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:13.0:smr-apr-2023-r1:*:*:*:*:*:*", "matchCriteriaId": "70825981-F895-4BFD-9B6E-92BFF0D67023", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:13.0:smr-dec-2022-r1:*:*:*:*:*:*", "matchCriteriaId": "299284DA-85AB-4162-B858-E67E5C6C14F7", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:13.0:smr-feb-2023-r1:*:*:*:*:*:*", "matchCriteriaId": "D98F307E-3B01-4C17-86E5-1C6299919417", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:13.0:smr-jan-2023-r1:*:*:*:*:*:*", "matchCriteriaId": "7D7DA96D-9C25-4DDA-A6BF-D998AC346B89", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:13.0:smr-jul-2023-r1:*:*:*:*:*:*", "matchCriteriaId": "34114DDC-DCDA-4306-8D23-2E628873171F", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:13.0:smr-jun-2023-r1:*:*:*:*:*:*", "matchCriteriaId": "85E4E8C1-749F-4A1C-8333-6BAFBF8B64D1", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:13.0:smr-mar-2023-r1:*:*:*:*:*:*", "matchCriteriaId": "5F73D594-178F-4FC8-9F40-0E545E2647B0", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:13.0:smr-may-2023-r1:*:*:*:*:*:*", "matchCriteriaId": "3F3EF3F1-4E54-46E3-A308-69656A29FBD2", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:13.0:smr-nov-2022-r1:*:*:*:*:*:*", "matchCriteriaId": "D2B24866-2B3A-4A1A-8B75-EF7A7541797A", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:13.0:smr-oct-2022-r1:*:*:*:*:*:*", "matchCriteriaId": "EBB29F18-A929-432B-B20C-365401E6CA12", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Improper privilege management vulnerability in MMIGroup prior to SMR Aug-2023 Release 1 allows code execution with privilege."}, {"lang": "es", "value": "Vulnerabilidad de gesti\u00f3n de privilegios inadecuada en MMIGroup anterior a SMR Aug-2023 Release 1 que permite la ejecuci\u00f3n de c\u00f3digo con privilegio. "}], "id": "CVE-2023-30680", "lastModified": "2024-11-21T08:00:40.243", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 8.4, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.5, "impactScore": 5.9, "source": "mobile.security@samsung.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2023-08-10T02:15:10.713", "references": [{"source": "mobile.security@samsung.com", "tags": ["Vendor Advisory"], "url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=08"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=08"}], "sourceIdentifier": "mobile.security@samsung.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-269"}], "source": "nvd@nist.gov", "type": "Primary"}, {"description": [{"lang": "en", "value": "CWE-266"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:samsung:android:12.0:-:*:*:*:*:*:* (string)

matchCriteriaId : D757450C-270E-4FB2-A50C-7F769FED558A (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:o:samsung:android:12.0:smr-apr-2022-r1:*:*:*:*:*:* (string)

matchCriteriaId : EC4A2EBA-038B-44D5-84F3-FF326CD1C62D (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:o:samsung:android:12.0:smr-apr-2023-r1:*:*:*:*:*:* (string)

matchCriteriaId : 40EB3FC1-D79A-40C7-9E2B-573E20780982 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:o:samsung:android:12.0:smr-aug-2022-r1:*:*:*:*:*:* (string)

matchCriteriaId : 0ABFBBDB-E935-4C54-865A-0E607497DA87 (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:o:samsung:android:12.0:smr-dec-2021-r1:*:*:*:*:*:* (string)

matchCriteriaId : 3899E3E7-1284-4223-A258-DA691F5D62FE (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:o:samsung:android:12.0:smr-dec-2022-r1:*:*:*:*:*:* (string)

matchCriteriaId : ECD961EA-6881-4A14-83DE-C6972F6F681C (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:o:samsung:android:12.0:smr-feb-2022-r1:*:*:*:*:*:* (string)

matchCriteriaId : 011CC4F5-6701-41E9-BC7D-CFE6EFF682AC (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:o:samsung:android:12.0:smr-feb-2023-r1:*:*:*:*:*:* (string)

matchCriteriaId : 13E145E2-CE11-4EE5-9085-B4960FE4F52F (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:o:samsung:android:12.0:smr-jan-2022-r1:*:*:*:*:*:* (string)

matchCriteriaId : A3BBC8B6-1D2B-47C9-93EE-3D3DC43062F1 (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:o:samsung:android:12.0:smr-jan-2023-r1:*:*:*:*:*:* (string)

matchCriteriaId : 02600CDD-6862-4146-88E8-A2E73B7ED534 (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:o:samsung:android:12.0:smr-jul-2022-r1:*:*:*:*:*:* (string)

matchCriteriaId : 35F40D59-034B-44FB-8DCD-D469B50DE7E1 (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:o:samsung:android:12.0:smr-jul-2023-r1:*:*:*:*:*:* (string)

matchCriteriaId : CC84021B-9846-40FB-834B-7C5BECEFFEAC (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:o:samsung:android:12.0:smr-jun-2022-r1:*:*:*:*:*:* (string)

matchCriteriaId : BC3F8572-578B-4D19-9453-1D03DA55EF70 (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:o:samsung:android:12.0:smr-jun-2023-r1:*:*:*:*:*:* (string)

matchCriteriaId : EEABF42E-578E-4689-B80D-B305467AA72D (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:o:samsung:android:12.0:smr-mar-2022-r1:*:*:*:*:*:* (string)

matchCriteriaId : 9137C66C-4966-4C90-ABE9-7E22F7E29BA7 (string)

vulnerable : true (boolean)

}

15 : { »

criteria : cpe:2.3:o:samsung:android:12.0:smr-mar-2023-r1:*:*:*:*:*:* (string)

matchCriteriaId : E261C9D8-1E74-44B8-9F11-F5769CF8B7FD (string)

vulnerable : true (boolean)

}

16 : { »

criteria : cpe:2.3:o:samsung:android:12.0:smr-may-2022-r1:*:*:*:*:*:* (string)

matchCriteriaId : 18CD523B-530E-4187-8BFF-729CDAC69282 (string)

vulnerable : true (boolean)

}

17 : { »

criteria : cpe:2.3:o:samsung:android:12.0:smr-may-2023-r1:*:*:*:*:*:* (string)

matchCriteriaId : 4C28D3CD-DD34-4334-B03F-794B31A4BF48 (string)

vulnerable : true (boolean)

}

18 : { »

criteria : cpe:2.3:o:samsung:android:12.0:smr-nov-2021-r1:*:*:*:*:*:* (string)

matchCriteriaId : 5A81C86D-F1FE-4166-8F37-D7170E6B30FE (string)

vulnerable : true (boolean)

}

19 : { »

criteria : cpe:2.3:o:samsung:android:12.0:smr-nov-2022-r1:*:*:*:*:*:* (string)

matchCriteriaId : A3D80783-523A-455E-B1AD-0961086F79E6 (string)

vulnerable : true (boolean)

}

20 : { »

criteria : cpe:2.3:o:samsung:android:12.0:smr-oct-2022-r1:*:*:*:*:*:* (string)

matchCriteriaId : 89BE2958-0BEE-4CFD-A0BA-494DE62E7F32 (string)

vulnerable : true (boolean)

}

21 : { »

criteria : cpe:2.3:o:samsung:android:12.0:smr-sep-2022-r1:*:*:*:*:*:* (string)

matchCriteriaId : B0329C50-B904-480D-8EBB-F2757049FC81 (string)

vulnerable : true (boolean)

}

22 : { »

criteria : cpe:2.3:o:samsung:android:13.0:-:*:*:*:*:*:* (string)

matchCriteriaId : A123EDB1-3048-44B0-8D4D-39A2B24B5F6B (string)

vulnerable : true (boolean)

}

23 : { »

criteria : cpe:2.3:o:samsung:android:13.0:smr-apr-2023-r1:*:*:*:*:*:* (string)

matchCriteriaId : 70825981-F895-4BFD-9B6E-92BFF0D67023 (string)

vulnerable : true (boolean)

}

24 : { »

criteria : cpe:2.3:o:samsung:android:13.0:smr-dec-2022-r1:*:*:*:*:*:* (string)

matchCriteriaId : 299284DA-85AB-4162-B858-E67E5C6C14F7 (string)

vulnerable : true (boolean)

}

25 : { »

criteria : cpe:2.3:o:samsung:android:13.0:smr-feb-2023-r1:*:*:*:*:*:* (string)

matchCriteriaId : D98F307E-3B01-4C17-86E5-1C6299919417 (string)

vulnerable : true (boolean)

}

26 : { »

criteria : cpe:2.3:o:samsung:android:13.0:smr-jan-2023-r1:*:*:*:*:*:* (string)

matchCriteriaId : 7D7DA96D-9C25-4DDA-A6BF-D998AC346B89 (string)

vulnerable : true (boolean)

}

27 : { »

criteria : cpe:2.3:o:samsung:android:13.0:smr-jul-2023-r1:*:*:*:*:*:* (string)

matchCriteriaId : 34114DDC-DCDA-4306-8D23-2E628873171F (string)

vulnerable : true (boolean)

}

28 : { »

criteria : cpe:2.3:o:samsung:android:13.0:smr-jun-2023-r1:*:*:*:*:*:* (string)

matchCriteriaId : 85E4E8C1-749F-4A1C-8333-6BAFBF8B64D1 (string)

vulnerable : true (boolean)

}

29 : { »

criteria : cpe:2.3:o:samsung:android:13.0:smr-mar-2023-r1:*:*:*:*:*:* (string)

matchCriteriaId : 5F73D594-178F-4FC8-9F40-0E545E2647B0 (string)

vulnerable : true (boolean)

}

30 : { »

criteria : cpe:2.3:o:samsung:android:13.0:smr-may-2023-r1:*:*:*:*:*:* (string)

matchCriteriaId : 3F3EF3F1-4E54-46E3-A308-69656A29FBD2 (string)

vulnerable : true (boolean)

}

31 : { »

criteria : cpe:2.3:o:samsung:android:13.0:smr-nov-2022-r1:*:*:*:*:*:* (string)

matchCriteriaId : D2B24866-2B3A-4A1A-8B75-EF7A7541797A (string)

vulnerable : true (boolean)

}

32 : { »

criteria : cpe:2.3:o:samsung:android:13.0:smr-oct-2022-r1:*:*:*:*:*:* (string)

matchCriteriaId : EBB29F18-A929-432B-B20C-365401E6CA12 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Improper privilege management vulnerability in MMIGroup prior to SMR Aug-2023 Release 1 allows code execution with privilege. (string)

}

1 : { »

lang : es (string)

value : Vulnerabilidad de gestión de privilegios inadecuada en MMIGroup anterior a SMR Aug-2023 Release 1 que permite la ejecución de código con privilegio. (string)

}

]

id : CVE-2023-30680 (string)

lastModified : 2024-11-21T08:00:40.243 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 8.4 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : NONE (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 2.5 (number)

impactScore : 5.9 (number)

source : mobile.security@samsung.com (string)

type : Secondary (string)

}

1 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 7.8 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 1.8 (number)

impactScore : 5.9 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2023-08-10T02:15:10.713 (string)

references : [ »

0 : { »

source : mobile.security@samsung.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=08 (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=08 (string)

}

]

sourceIdentifier : mobile.security@samsung.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-269 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

1 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-266 (string)

}

]

source : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

type : Secondary (string)

}

]

}

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object