CVE-2023-30702 - Vulnerability Details

Vendors	Products
Samsung	Galaxy Book2 Go Galaxy Book2 Go Firmware Galaxy Book2 Pro 360 Galaxy Book2 Pro 360 Firmware Galaxy Book Go Galaxy Book Go 5g Galaxy Book Go 5g Firmware Galaxy Book Go Firmware
Samsung Mobile	Galaxy Book 2 Go Galaxy Book 2 Pro 360 Galaxy Book Go Galaxy Book Go 5g

Link	Providers
https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=08

Type	Values Removed	Values Added
First Time appeared		Samsung Mobile Samsung Mobile galaxy Book 2 Go Samsung Mobile galaxy Book 2 Pro 360 Samsung Mobile galaxy Book Go Samsung Mobile galaxy Book Go 5g
CPEs		cpe:2.3:h:samsung_mobile:galaxy_book_2_go:::::::: cpe:2.3:h:samsung_mobile:galaxy_book_2_pro_360:::::::: cpe:2.3:h:samsung_mobile:galaxy_book_go:::::::: cpe:2.3:h:samsung_mobile:galaxy_book_go_5g::::::::
Vendors & Products		Samsung Mobile Samsung Mobile galaxy Book 2 Go Samsung Mobile galaxy Book 2 Pro 360 Samsung Mobile galaxy Book Go Samsung Mobile galaxy Book Go 5g
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-30702", "assignerOrgId": "3af57064-a867-422c-b2ad-40307b65c458", "state": "PUBLISHED", "assignerShortName": "Samsung Mobile", "dateReserved": "2023-04-14T01:59:51.128Z", "datePublished": "2023-08-10T01:18:49.576Z", "dateUpdated": "2024-10-10T15:54:26.321Z"}, "containers": {"cna": {"problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-121: Stack-based Buffer Overflow"}]}], "affected": [{"vendor": "Samsung Mobile", "product": "Galaxy book Go, Galaxy book Go 5G, Galaxy book2 Go and Galaxy book2 Pro 360", "versions": [{"status": "unaffected", "version": "&quot;SAMSUNG ELECTONICS, CO, LTD. - System Hardware Update - 7/13/2023&quot;"}], "defaultStatus": "affected"}], "descriptions": [{"lang": "en", "value": "Stack overflow vulnerability in SSHDCPAPP TA prior to &quot;SAMSUNG ELECTONICS, CO, LTD. - System Hardware Update - 7/13/2023&quot; in Windows Update for Galaxy book Go, Galaxy book Go 5G, Galaxy book2 Go and Galaxy book2 Pro 360 allows local attacker to execute arbitrary code."}], "references": [{"url": "https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=08"}], "metrics": [{"format": "CVSS", "cvssV3_1": {"version": "3.1", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "HIGH", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseSeverity": "MEDIUM", "baseScore": 6.7, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"}}], "providerMetadata": {"orgId": "3af57064-a867-422c-b2ad-40307b65c458", "shortName": "Samsung Mobile", "dateUpdated": "2023-08-10T01:18:49.576Z"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T14:37:14.918Z"}, "title": "CVE Program Container", "references": [{"url": "https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=08", "tags": ["x_transferred"]}]}, {"affected": [{"vendor": "samsung_mobile", "product": "galaxy_book_go", "cpes": ["cpe:2.3:h:samsung_mobile:galaxy_book_go:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "\\&/quot_SAMSUNG_ELECTONICS_CO_LTD_System_Hardware_Update_13/2023\\/&quot", "status": "affected"}]}, {"vendor": "samsung_mobile", "product": "galaxy_book_go_5g", "cpes": ["cpe:2.3:h:samsung_mobile:galaxy_book_go_5g:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "\\&/quot_SAMSUNG_ELECTONICS_CO_LTD_System_Hardware_Update_13/2023\\/&quot", "status": "affected"}]}, {"vendor": "samsung_mobile", "product": "galaxy_book_2_go", "cpes": ["cpe:2.3:h:samsung_mobile:galaxy_book_2_go:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "\\&/quot_SAMSUNG_ELECTONICS_CO_LTD_System_Hardware_Update_13/2023\\/&quot", "status": "affected"}]}, {"vendor": "samsung_mobile", "product": "galaxy_book_2_pro_360", "cpes": ["cpe:2.3:h:samsung_mobile:galaxy_book_2_pro_360:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "\\&/quot_SAMSUNG_ELECTONICS_CO_LTD_System_Hardware_Update_13/2023\\/&quot", "status": "affected"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-10-10T15:44:46.458860Z", "id": "CVE-2023-30702", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-10T15:54:26.321Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2023-30702 (string)

assignerOrgId : 3af57064-a867-422c-b2ad-40307b65c458 (string)

state : PUBLISHED (string)

assignerShortName : Samsung Mobile (string)

dateReserved : 2023-04-14T01:59:51.128Z (string)

datePublished : 2023-08-10T01:18:49.576Z (string)

dateUpdated : 2024-10-10T15:54:26.321Z (string)

}

containers : { »

cna : { »

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

description : CWE-121: Stack-based Buffer Overflow (string)

}

]

}

]

affected : [ »

0 : { »

vendor : Samsung Mobile (string)

product : Galaxy book Go, Galaxy book Go 5G, Galaxy book2 Go and Galaxy book2 Pro 360 (string)

versions : [ »

0 : { »

status : unaffected (string)

version : "SAMSUNG ELECTONICS, CO, LTD. - System Hardware Update - 7/13/2023" (string)

}

]

defaultStatus : affected (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Stack overflow vulnerability in SSHDCPAPP TA prior to "SAMSUNG ELECTONICS, CO, LTD. - System Hardware Update - 7/13/2023" in Windows Update for Galaxy book Go, Galaxy book Go 5G, Galaxy book2 Go and Galaxy book2 Pro 360 allows local attacker to execute arbitrary code. (string)

}

]

references : [ »

0 : { »

url : https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=08 (string)

}

]

metrics : [ »

0 : { »

format : CVSS (string)

cvssV3_1 : { »

version : 3.1 (string)

attackVector : LOCAL (string)

attackComplexity : LOW (string)

privilegesRequired : HIGH (string)

userInteraction : NONE (string)

scope : UNCHANGED (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

availabilityImpact : HIGH (string)

baseSeverity : MEDIUM (string)

baseScore : 6.7 (number)

vectorString : CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H (string)

}

]

providerMetadata : { »

orgId : 3af57064-a867-422c-b2ad-40307b65c458 (string)

shortName : Samsung Mobile (string)

dateUpdated : 2023-08-10T01:18:49.576Z (string)

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T14:37:14.918Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=08 (string)

tags : [ »

0 : x_transferred (string)

]

}

]

}

1 : { »

affected : [ »

0 : { »

vendor : samsung_mobile (string)

product : galaxy_book_go (string)

cpes : [ »

0 : cpe:2.3:h:samsung_mobile:galaxy_book_go:*:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : \&/quot_SAMSUNG_ELECTONICS_CO_LTD_System_Hardware_Update_13/2023\/&quot (string)

status : affected (string)

}

]

}

1 : { »

vendor : samsung_mobile (string)

product : galaxy_book_go_5g (string)

cpes : [ »

0 : cpe:2.3:h:samsung_mobile:galaxy_book_go_5g:*:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : \&/quot_SAMSUNG_ELECTONICS_CO_LTD_System_Hardware_Update_13/2023\/&quot (string)

status : affected (string)

}

]

}

2 : { »

vendor : samsung_mobile (string)

product : galaxy_book_2_go (string)

cpes : [ »

0 : cpe:2.3:h:samsung_mobile:galaxy_book_2_go:*:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : \&/quot_SAMSUNG_ELECTONICS_CO_LTD_System_Hardware_Update_13/2023\/&quot (string)

status : affected (string)

}

]

}

3 : { »

vendor : samsung_mobile (string)

product : galaxy_book_2_pro_360 (string)

cpes : [ »

0 : cpe:2.3:h:samsung_mobile:galaxy_book_2_pro_360:*:*:*:*:*:*:*:* (string)

]

defaultStatus : unknown (string)

versions : [ »

0 : { »

version : \&/quot_SAMSUNG_ELECTONICS_CO_LTD_System_Hardware_Update_13/2023\/&quot (string)

status : affected (string)

}

]

}

]

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2024-10-10T15:44:46.458860Z (string)

id : CVE-2023-30702 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-10-10T15:54:26.321Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2023-30702", "assignerOrgId": "3af57064-a867-422c-b2ad-40307b65c458", "state": "PUBLISHED", "assignerShortName": "Samsung Mobile", "dateReserved": "2023-04-14T01:59:51.128Z", "datePublished": "2023-08-10T01:18:49.576Z", "dateUpdated": "2024-10-10T15:54:26.321Z"}, "containers": {"cna": {"problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-121: Stack-based Buffer Overflow"}]}], "affected": [{"vendor": "Samsung Mobile", "product": "Galaxy book Go, Galaxy book Go 5G, Galaxy book2 Go and Galaxy book2 Pro 360", "versions": [{"status": "unaffected", "version": "&quot;SAMSUNG ELECTONICS, CO, LTD. - System Hardware Update - 7/13/2023&quot;"}], "defaultStatus": "affected"}], "descriptions": [{"lang": "en", "value": "Stack overflow vulnerability in SSHDCPAPP TA prior to &quot;SAMSUNG ELECTONICS, CO, LTD. - System Hardware Update - 7/13/2023&quot; in Windows Update for Galaxy book Go, Galaxy book Go 5G, Galaxy book2 Go and Galaxy book2 Pro 360 allows local attacker to execute arbitrary code."}], "references": [{"url": "https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=08"}], "metrics": [{"format": "CVSS", "cvssV3_1": {"version": "3.1", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "HIGH", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH", "baseSeverity": "MEDIUM", "baseScore": 6.7, "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H"}}], "providerMetadata": {"orgId": "3af57064-a867-422c-b2ad-40307b65c458", "shortName": "Samsung Mobile", "dateUpdated": "2023-08-10T01:18:49.576Z"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T14:37:14.918Z"}, "title": "CVE Program Container", "references": [{"url": "https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=08", "tags": ["x_transferred"]}]}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-30702", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-10-10T15:44:46.458860Z"}}}], "affected": [{"cpes": ["cpe:2.3:h:samsung_mobile:galaxy_book_go:*:*:*:*:*:*:*:*"], "vendor": "samsung_mobile", "product": "galaxy_book_go", "versions": [{"status": "affected", "version": "\\&/quot_SAMSUNG_ELECTONICS_CO_LTD_System_Hardware_Update_13/2023\\/&quot"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:samsung_mobile:galaxy_book_go_5g:*:*:*:*:*:*:*:*"], "vendor": "samsung_mobile", "product": "galaxy_book_go_5g", "versions": [{"status": "affected", "version": "\\&/quot_SAMSUNG_ELECTONICS_CO_LTD_System_Hardware_Update_13/2023\\/&quot"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:samsung_mobile:galaxy_book_2_go:*:*:*:*:*:*:*:*"], "vendor": "samsung_mobile", "product": "galaxy_book_2_go", "versions": [{"status": "affected", "version": "\\&/quot_SAMSUNG_ELECTONICS_CO_LTD_System_Hardware_Update_13/2023\\/&quot"}], "defaultStatus": "unknown"}, {"cpes": ["cpe:2.3:h:samsung_mobile:galaxy_book_2_pro_360:*:*:*:*:*:*:*:*"], "vendor": "samsung_mobile", "product": "galaxy_book_2_pro_360", "versions": [{"status": "affected", "version": "\\&/quot_SAMSUNG_ELECTONICS_CO_LTD_System_Hardware_Update_13/2023\\/&quot"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-10-10T15:50:24.604Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

cveId : CVE-2023-30702 (string)

assignerOrgId : 3af57064-a867-422c-b2ad-40307b65c458 (string)

state : PUBLISHED (string)

assignerShortName : Samsung Mobile (string)

dateReserved : 2023-04-14T01:59:51.128Z (string)

datePublished : 2023-08-10T01:18:49.576Z (string)

dateUpdated : 2024-10-10T15:54:26.321Z (string)

}

containers : { »

cna : { »

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

description : CWE-121: Stack-based Buffer Overflow (string)

}

]

}

]

affected : [ »

0 : { »

vendor : Samsung Mobile (string)

product : Galaxy book Go, Galaxy book Go 5G, Galaxy book2 Go and Galaxy book2 Pro 360 (string)

versions : [ »

0 : { »

status : unaffected (string)

version : "SAMSUNG ELECTONICS, CO, LTD. - System Hardware Update - 7/13/2023" (string)

}

]

defaultStatus : affected (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Stack overflow vulnerability in SSHDCPAPP TA prior to "SAMSUNG ELECTONICS, CO, LTD. - System Hardware Update - 7/13/2023" in Windows Update for Galaxy book Go, Galaxy book Go 5G, Galaxy book2 Go and Galaxy book2 Pro 360 allows local attacker to execute arbitrary code. (string)

}

]

references : [ »

0 : { »

url : https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=08 (string)

}

]

metrics : [ »

0 : { »

format : CVSS (string)

cvssV3_1 : { »

version : 3.1 (string)

attackVector : LOCAL (string)

attackComplexity : LOW (string)

privilegesRequired : HIGH (string)

userInteraction : NONE (string)

scope : UNCHANGED (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

availabilityImpact : HIGH (string)

baseSeverity : MEDIUM (string)

baseScore : 6.7 (number)

vectorString : CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H (string)

}

]

providerMetadata : { »

orgId : 3af57064-a867-422c-b2ad-40307b65c458 (string)

shortName : Samsung Mobile (string)

dateUpdated : 2023-08-10T01:18:49.576Z (string)

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T14:37:14.918Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=08 (string)

tags : [ »

0 : x_transferred (string)

]

}

]

}

1 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2023-30702 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

version : 2.0.3 (string)

timestamp : 2024-10-10T15:44:46.458860Z (string)

}

]

affected : [ »

0 : { »

cpes : [ »

0 : cpe:2.3:h:samsung_mobile:galaxy_book_go:*:*:*:*:*:*:*:* (string)

]

vendor : samsung_mobile (string)

product : galaxy_book_go (string)

versions : [ »

0 : { »

status : affected (string)

version : \&/quot_SAMSUNG_ELECTONICS_CO_LTD_System_Hardware_Update_13/2023\/&quot (string)

}

]

defaultStatus : unknown (string)

}

1 : { »

cpes : [ »

0 : cpe:2.3:h:samsung_mobile:galaxy_book_go_5g:*:*:*:*:*:*:*:* (string)

]

vendor : samsung_mobile (string)

product : galaxy_book_go_5g (string)

versions : [ »

0 : { »

status : affected (string)

version : \&/quot_SAMSUNG_ELECTONICS_CO_LTD_System_Hardware_Update_13/2023\/&quot (string)

}

]

defaultStatus : unknown (string)

}

2 : { »

cpes : [ »

0 : cpe:2.3:h:samsung_mobile:galaxy_book_2_go:*:*:*:*:*:*:*:* (string)

]

vendor : samsung_mobile (string)

product : galaxy_book_2_go (string)

versions : [ »

0 : { »

status : affected (string)

version : \&/quot_SAMSUNG_ELECTONICS_CO_LTD_System_Hardware_Update_13/2023\/&quot (string)

}

]

defaultStatus : unknown (string)

}

3 : { »

cpes : [ »

0 : cpe:2.3:h:samsung_mobile:galaxy_book_2_pro_360:*:*:*:*:*:*:*:* (string)

]

vendor : samsung_mobile (string)

product : galaxy_book_2_pro_360 (string)

versions : [ »

0 : { »

status : affected (string)

version : \&/quot_SAMSUNG_ELECTONICS_CO_LTD_System_Hardware_Update_13/2023\/&quot (string)

}

]

defaultStatus : unknown (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2024-10-10T15:50:24.604Z (string)

}

]

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:samsung:galaxy_book_go_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "8CC4214A-9D1C-4A36-8B5F-15EE9F98AB05", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:samsung:galaxy_book_go:-:*:*:*:*:*:*:*", "matchCriteriaId": "67BB8AB9-8622-48D4-AE16-464E9BE01429", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:samsung:galaxy_book_go_5g_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "1ACC9B93-5B14-467E-B16A-E2378DB7338C", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:samsung:galaxy_book_go_5g:-:*:*:*:*:*:*:*", "matchCriteriaId": "79F245FC-9B18-460B-A86C-2016FE0C32B4", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:samsung:galaxy_book2_go_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "7D75771B-4BFA-478E-9703-03036C544A4F", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:samsung:galaxy_book2_go:-:*:*:*:*:*:*:*", "matchCriteriaId": "F62C48C2-E69C-46FE-84DB-13BC1B519F9A", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:samsung:galaxy_book2_pro_360_firmware:-:*:*:*:*:*:*:*", "matchCriteriaId": "4D936433-A4EB-44A0-B230-8001BE75BE45", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:h:samsung:galaxy_book2_pro_360:-:*:*:*:*:*:*:*", "matchCriteriaId": "A5CC5E85-7209-4E0D-B96A-11C77513CE8A", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "Stack overflow vulnerability in SSHDCPAPP TA prior to &quot;SAMSUNG ELECTONICS, CO, LTD. - System Hardware Update - 7/13/2023&quot; in Windows Update for Galaxy book Go, Galaxy book Go 5G, Galaxy book2 Go and Galaxy book2 Pro 360 allows local attacker to execute arbitrary code."}], "id": "CVE-2023-30702", "lastModified": "2024-11-21T08:00:43.403", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 6.7, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 0.8, "impactScore": 5.9, "source": "mobile.security@samsung.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2023-08-10T02:15:12.547", "references": [{"source": "mobile.security@samsung.com", "tags": ["Vendor Advisory"], "url": "https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=08"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=08"}], "sourceIdentifier": "mobile.security@samsung.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-787"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:samsung:galaxy_book_go_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 8CC4214A-9D1C-4A36-8B5F-15EE9F98AB05 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:samsung:galaxy_book_go:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 67BB8AB9-8622-48D4-AE16-464E9BE01429 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

1 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:samsung:galaxy_book_go_5g_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 1ACC9B93-5B14-467E-B16A-E2378DB7338C (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:samsung:galaxy_book_go_5g:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 79F245FC-9B18-460B-A86C-2016FE0C32B4 (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

2 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:samsung:galaxy_book2_go_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 7D75771B-4BFA-478E-9703-03036C544A4F (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:samsung:galaxy_book2_go:-:*:*:*:*:*:*:* (string)

matchCriteriaId : F62C48C2-E69C-46FE-84DB-13BC1B519F9A (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

3 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:samsung:galaxy_book2_pro_360_firmware:-:*:*:*:*:*:*:* (string)

matchCriteriaId : 4D936433-A4EB-44A0-B230-8001BE75BE45 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

1 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:h:samsung:galaxy_book2_pro_360:-:*:*:*:*:*:*:* (string)

matchCriteriaId : A5CC5E85-7209-4E0D-B96A-11C77513CE8A (string)

vulnerable : false (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

operator : AND (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Stack overflow vulnerability in SSHDCPAPP TA prior to "SAMSUNG ELECTONICS, CO, LTD. - System Hardware Update - 7/13/2023" in Windows Update for Galaxy book Go, Galaxy book Go 5G, Galaxy book2 Go and Galaxy book2 Pro 360 allows local attacker to execute arbitrary code. (string)

}

]

id : CVE-2023-30702 (string)

lastModified : 2024-11-21T08:00:43.403 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 6.7 (number)

baseSeverity : MEDIUM (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : HIGH (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 0.8 (number)

impactScore : 5.9 (number)

source : mobile.security@samsung.com (string)

type : Secondary (string)

}

1 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 7.8 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 1.8 (number)

impactScore : 5.9 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2023-08-10T02:15:12.547 (string)

references : [ »

0 : { »

source : mobile.security@samsung.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=08 (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=08 (string)

}

]

sourceIdentifier : mobile.security@samsung.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-787 (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object