by Kastro
Paper/Archive/CVE-2023-31114

CVE-2023-31114

mitre — An issue was discovered in the Shannon RCS component in Samsung Exynos Modem 5123 and 5300.

EPSS 0.6%CVSS 9.1
critical.is priorityof 100
37
CVSS 9.1 (ADP, NVD agree)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 46.6.466 × 209.3No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

An issue was discovered in the Shannon RCS component in Samsung Exynos Modem 5123 and 5300. Incorrect resource transfer between spheres can cause unintended querying of the SIM status via a crafted application.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

CISA ADP9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refsemiconductor.samsung.com/support/quality-support/product-security-updates