← Back

CVE-2023-31114

nvd nist
Published: Jun 7, 2023Modified: Jun 17, 2026

JSON object

Loading...
9.1
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Exploitability: 3.9 / Impact: 5.2
Source: NVD

Description

An issue was discovered in the Shannon RCS component in Samsung Exynos Modem 5123 and 5300. Incorrect resource transfer between spheres can cause unintended querying of the SIM status via a crafted application.

Affected (2)

Samsung
2 products
Exynos 5123 Firmware
Exynos 5300 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Exynos 5123 Firmware
All versions
Running on/withPlatform Versions
Samsung
Exynos 5123
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Exynos 5300 Firmware
All versions
Running on/withPlatform Versions
Samsung
Exynos 5300
All versions

Related CWEs

CWE-669
Incorrect Resource Transfer Between Spheres
The product does not properly transfer a resource/behavior to another sphere, or improperly imports a resource/behavior from another sphere, in a manner that provides unintended control over that resource.

References (2)

Source: cve@mitre.org
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.