by Kastro
Paper/Archive/CVE-2023-30723

CVE-2023-30723

Samsung Mobile Samsung Health — Improper input validation vulnerability in Samsung Health prior to version 6.24.2.011 allows attackers to write arbitrary file with Samsu…

EPSS 0.4%CVSS 9.8
critical.is priorityof 100
36
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 34.8.348 × 207.0No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Improper input validation vulnerability in Samsung Health prior to version 6.24.2.011 allows attackers to write arbitrary file with Samsung Health privilege.

Affected

ProductAffectedFixed inSource
Samsung Healthsee advisory6.24.2.011CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Samsung Mobile (CNA)5.5CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: partial

References

refsecurity.samsungmobile.com/serviceWeb.smsb?year=2023&month=09