← Back

CVE-2023-21445

nvd nist
Published: Feb 9, 2023Modified: Nov 21, 2024

JSON object

Loading...
7.8
Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.8 / Impact: 5.9
Source: NVD

Description

Improper access control vulnerability in MyFiles prior to versions 12.2.09 in Android R(11), 13.1.03.501 in Android S(12) and 14.1.00.422 in Android T(13) allows local attacker to write file with MyFiles privilege via implicit intent.

Affected (78)

Products: Samsung: Android
Samsung
1 product
Android
Configuration A
78 vulnerable
Vulnerable SoftwareAffected Versions
Samsung
Android
Version 11.0
Android
Version 11.0 smr-apr-2021-r1
Android
Version 11.0 smr-apr-2022-r1
Android
Version 11.0 smr-apr-2023-r1
Android
Version 11.0 smr-aug-2021-r1
Android
Version 11.0 smr-aug-2022-r1
Android
Version 11.0 smr-aug-2023-r1
Android
Version 11.0 smr-dec-2020-r1
Android
Version 11.0 smr-dec-2021-r1
Android
Version 11.0 smr-dec-2022-r1
Android
Version 11.0 smr-dec-2023-r1
Android
Version 11.0 smr-feb-2021-r1
Android
Version 11.0 smr-feb-2022-r1
Android
Version 11.0 smr-feb-2023-r1
Android
Version 11.0 smr-jan-2021-r1
Android
Version 11.0 smr-jan-2022-r1
Android
Version 11.0 smr-jul-2021-r1
Android
Version 11.0 smr-jul-2022-r1
Android
Version 11.0 smr-jul-2023-r1
Android
Version 11.0 smr-jun-2021-r1
Android
Version 11.0 smr-jun-2022-r1
Android
Version 11.0 smr-jun-2023-r1
Android
Version 11.0 smr-mar-2021-r1
Android
Version 11.0 smr-mar-2022-r1
Android
Version 11.0 smr-mar-2023-r1
Android
Version 11.0 smr-may-2021-r1
Android
Version 11.0 smr-may-2022-r1
Android
Version 11.0 smr-may-2023-r1
Android
Version 11.0 smr-nov-2021-r1
Android
Version 11.0 smr-nov-2022-r1
Android
Version 11.0 smr-nov-2023-r1
Android
Version 11.0 smr-oct-2021-r1
Android
Version 11.0 smr-oct-2022-r1
Android
Version 11.0 smr-oct-2023-r1
Android
Version 11.0 smr-sep-2021-r1
Android
Version 11.0 smr-sep-2022-r1
Android
Version 11.0 smr-sep-2023-r1
Android
Version 12.0
Android
Version 12.0 smr-apr-2022-r1
Android
Version 12.0 smr-apr-2023-r1
Android
Version 12.0 smr-aug-2022-r1
Android
Version 12.0 smr-aug-2023-r1
Android
Version 12.0 smr-dec-2021-r1
Android
Version 12.0 smr-dec-2022-r1
Android
Version 12.0 smr-dec-2023-r1
Android
Version 12.0 smr-feb-2022-r1
Android
Version 12.0 smr-feb-2023-r1
Android
Version 12.0 smr-jan-2022-r1
Android
Version 12.0 smr-jul-2022-r1
Android
Version 12.0 smr-jul-2023-r1
Android
Version 12.0 smr-jun-2022-r1
Android
Version 12.0 smr-jun-2023-r1
Android
Version 12.0 smr-mar-2022-r1
Android
Version 12.0 smr-mar-2023-r1
Android
Version 12.0 smr-may-2022-r1
Android
Version 12.0 smr-may-2023-r1
Android
Version 12.0 smr-nov-2021-r1
Android
Version 12.0 smr-nov-2022-r1
Android
Version 12.0 smr-nov-2023-r1
Android
Version 12.0 smr-oct-2022-r1
Android
Version 12.0 smr-oct-2023-r1
Android
Version 12.0 smr-sep-2022-r1
Android
Version 12.0 smr-sep-2023-r1
Android
Version 13.0
Android
Version 13.0 smr-apr-2023-r1
Android
Version 13.0 smr-aug-2023-r1
Android
Version 13.0 smr-dec-2022-r1
Android
Version 13.0 smr-dec-2023-r1
Android
Version 13.0 smr-feb-2023-r1
Android
Version 13.0 smr-jul-2023-r1
Android
Version 13.0 smr-jun-2023-r1
Android
Version 13.0 smr-mar-2023-r1
Android
Version 13.0 smr-may-2023-r1
Android
Version 13.0 smr-nov-2022-r1
Android
Version 13.0 smr-nov-2023-r1
Android
Version 13.0 smr-oct-2022-r1
Android
Version 13.0 smr-oct-2023-r1
Android
Version 13.0 smr-sep-2023-r1

Related CWEs

CWE-284
Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
CWE-668
Exposure of Resource to Wrong Sphere
The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.

References (2)

Source: mobile.security@samsung.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.