CVE-2023-30711 | ByteOS Network

Vulnerability Details :

CVE-2023-30711

Assigner-Samsung Mobile

Assigner Org ID-3af57064-a867-422c-b2ad-40307b65c458

Published At-06 Sep, 2023 | 03:11

Updated At-26 Sep, 2024 | 15:32

Improper authentication in Phone and Messaging Storage SMR SEP-2023 Release 1 allows attacker to insert arbitrary data to the provider.

EPSS History

Score

Latest Score

-

N/A

Percentile

Latest Percentile

-

N/A

▼Common Vulnerabilities and Exposures (CVE)

Assigner:Samsung Mobile

Assigner Org ID:3af57064-a867-422c-b2ad-40307b65c458

Published At:06 Sep, 2023 | 03:11

Updated At:26 Sep, 2024 | 15:32

▼CVE Numbering Authority (CNA)

Improper authentication in Phone and Messaging Storage SMR SEP-2023 Release 1 allows attacker to insert arbitrary data to the provider.

Affected Products

Vendor

Samsung Electronics

Product

Samsung Mobile Devices

Default Status

affected

Versions

Unaffected

SMR Sep-2023 Release in Android 11, 12, 13

Problem Types

Type	CWE ID	Description
N/A	N/A	CWE-287: Improper Authentication

Type: N/A

CWE ID: N/A

Description: CWE-287: Improper Authentication

Metrics

Version	Base score	Base severity	Vector
3.1	4.0	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Version: 3.1

Base score: 4.0

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

References

Hyperlink	Resource
https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=09	N/A

Hyperlink: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=09

Resource: N/A

▼Authorized Data Publishers (ADP)

1. CVE Program Container

References

Hyperlink	Resource
https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=09	x_transferred

Hyperlink: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=09

Resource:

x_transferred

2. CISA ADP Vulnrichment

Metrics Other Info

▼National Vulnerability Database (NVD)

Source:mobile.security@samsung.com

Published At:06 Sep, 2023 | 04:15

Updated At:07 Nov, 2023 | 04:13

Improper authentication in Phone and Messaging Storage SMR SEP-2023 Release 1 allows attacker to insert arbitrary data to the provider.

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	3.3	LOW	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Secondary	3.1	4.0	MEDIUM	CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Type: Primary

Version: 3.1

Base score: 3.3

Base severity: LOW

Vector:

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Type: Secondary

Version: 3.1

Base score: 4.0

Base severity: MEDIUM

Vector:

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

CPE Matches

>>android>>11.0

cpe:2.3:o:samsung:android:11.0:-:*:*:*:*:*:*

>>android>>11.0

cpe:2.3:o:samsung:android:11.0:smr-apr-2021-r1:*:*:*:*:*:*

>>android>>11.0

cpe:2.3:o:samsung:android:11.0:smr-apr-2022-r1:*:*:*:*:*:*

>>android>>11.0

cpe:2.3:o:samsung:android:11.0:smr-apr-2023-r1:*:*:*:*:*:*

>>android>>11.0

cpe:2.3:o:samsung:android:11.0:smr-aug-2021-r1:*:*:*:*:*:*

>>android>>11.0

cpe:2.3:o:samsung:android:11.0:smr-aug-2022-r1:*:*:*:*:*:*

>>android>>11.0

cpe:2.3:o:samsung:android:11.0:smr-aug-2023-r1:*:*:*:*:*:*

>>android>>11.0

cpe:2.3:o:samsung:android:11.0:smr-dec-2020-r1:*:*:*:*:*:*

>>android>>11.0

cpe:2.3:o:samsung:android:11.0:smr-dec-2021-r1:*:*:*:*:*:*

>>android>>11.0

cpe:2.3:o:samsung:android:11.0:smr-dec-2022-r1:*:*:*:*:*:*

>>android>>11.0

cpe:2.3:o:samsung:android:11.0:smr-feb-2021-r1:*:*:*:*:*:*

>>android>>11.0

cpe:2.3:o:samsung:android:11.0:smr-feb-2022-r1:*:*:*:*:*:*

>>android>>11.0

cpe:2.3:o:samsung:android:11.0:smr-feb-2023-r1:*:*:*:*:*:*

>>android>>11.0

cpe:2.3:o:samsung:android:11.0:smr-jan-2021-r1:*:*:*:*:*:*

>>android>>11.0

cpe:2.3:o:samsung:android:11.0:smr-jan-2022-r1:*:*:*:*:*:*

>>android>>11.0

cpe:2.3:o:samsung:android:11.0:smr-jan-2023-r1:*:*:*:*:*:*

>>android>>11.0

cpe:2.3:o:samsung:android:11.0:smr-jul-2021-r1:*:*:*:*:*:*

>>android>>11.0

cpe:2.3:o:samsung:android:11.0:smr-jul-2022-r1:*:*:*:*:*:*

>>android>>11.0

cpe:2.3:o:samsung:android:11.0:smr-jul-2023-r1:*:*:*:*:*:*

>>android>>11.0

cpe:2.3:o:samsung:android:11.0:smr-jun-2021-r1:*:*:*:*:*:*

>>android>>11.0

cpe:2.3:o:samsung:android:11.0:smr-jun-2022-r1:*:*:*:*:*:*

>>android>>11.0

cpe:2.3:o:samsung:android:11.0:smr-jun-2023-r1:*:*:*:*:*:*

>>android>>11.0

cpe:2.3:o:samsung:android:11.0:smr-mar-2021-r1:*:*:*:*:*:*

>>android>>11.0

cpe:2.3:o:samsung:android:11.0:smr-mar-2022-r1:*:*:*:*:*:*

>>android>>11.0

cpe:2.3:o:samsung:android:11.0:smr-mar-2023-r1:*:*:*:*:*:*

>>android>>11.0

cpe:2.3:o:samsung:android:11.0:smr-may-2021-r1:*:*:*:*:*:*

>>android>>11.0

cpe:2.3:o:samsung:android:11.0:smr-may-2022-r1:*:*:*:*:*:*

>>android>>11.0

cpe:2.3:o:samsung:android:11.0:smr-may-2023-r1:*:*:*:*:*:*

>>android>>11.0

cpe:2.3:o:samsung:android:11.0:smr-nov-2021-r1:*:*:*:*:*:*

>>android>>11.0

cpe:2.3:o:samsung:android:11.0:smr-nov-2022-r1:*:*:*:*:*:*

>>android>>11.0

cpe:2.3:o:samsung:android:11.0:smr-oct-2021-r1:*:*:*:*:*:*

>>android>>11.0

cpe:2.3:o:samsung:android:11.0:smr-oct-2022-r1:*:*:*:*:*:*

>>android>>11.0

cpe:2.3:o:samsung:android:11.0:smr-sep-2021-r1:*:*:*:*:*:*

>>android>>11.0

cpe:2.3:o:samsung:android:11.0:smr-sep-2022-r1:*:*:*:*:*:*

>>android>>12.0

cpe:2.3:o:samsung:android:12.0:-:*:*:*:*:*:*

>>android>>12.0

cpe:2.3:o:samsung:android:12.0:smr-apr-2022-r1:*:*:*:*:*:*

>>android>>12.0

cpe:2.3:o:samsung:android:12.0:smr-apr-2023-r1:*:*:*:*:*:*

>>android>>12.0

cpe:2.3:o:samsung:android:12.0:smr-aug-2022-r1:*:*:*:*:*:*

>>android>>12.0

cpe:2.3:o:samsung:android:12.0:smr-aug-2023-r1:*:*:*:*:*:*

>>android>>12.0

cpe:2.3:o:samsung:android:12.0:smr-dec-2021-r1:*:*:*:*:*:*

>>android>>12.0

cpe:2.3:o:samsung:android:12.0:smr-dec-2022-r1:*:*:*:*:*:*

>>android>>12.0

cpe:2.3:o:samsung:android:12.0:smr-feb-2022-r1:*:*:*:*:*:*

>>android>>12.0

cpe:2.3:o:samsung:android:12.0:smr-feb-2023-r1:*:*:*:*:*:*

>>android>>12.0

cpe:2.3:o:samsung:android:12.0:smr-jan-2022-r1:*:*:*:*:*:*

>>android>>12.0

cpe:2.3:o:samsung:android:12.0:smr-jan-2023-r1:*:*:*:*:*:*

>>android>>12.0

cpe:2.3:o:samsung:android:12.0:smr-jul-2022-r1:*:*:*:*:*:*

>>android>>12.0

cpe:2.3:o:samsung:android:12.0:smr-jul-2023-r1:*:*:*:*:*:*

>>android>>12.0

cpe:2.3:o:samsung:android:12.0:smr-jun-2022-r1:*:*:*:*:*:*

>>android>>12.0

cpe:2.3:o:samsung:android:12.0:smr-jun-2023-r1:*:*:*:*:*:*

>>android>>12.0

cpe:2.3:o:samsung:android:12.0:smr-mar-2022-r1:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
NVD-CWE-Other	Primary	nvd@nist.gov

CWE ID: NVD-CWE-Other

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=09	mobile.security@samsung.com	Vendor Advisory

Hyperlink: https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=09

Source: mobile.security@samsung.com

Resource:

Vendor Advisory

Similar CVEs

55Records found

Matching Score-8

Assigner-Samsung Mobile

Matching Score-8

Assigner-Samsung Mobile

CVSS Score-4||MEDIUM

EPSS-0.02% / 4.06%

||

7 Day CHG~0.00%

Published-07 May, 2025 | 08:34

Updated-08 May, 2025 | 03:56

Out-of-bounds write in libsavscmn prior to Android 15 allows local attackers to cause memory corruption.

Vendor-Samsung Electronics

Product-libsavscmn

Matching Score-8

Assigner-Samsung Mobile

Matching Score-8

Assigner-Samsung Mobile

CVSS Score-4.3||MEDIUM

EPSS-0.04% / 12.77%

||

7 Day CHG~0.00%

Published-10 Aug, 2023 | 01:18

Updated-04 Oct, 2024 | 15:43

Improper access control in Telecom prior to SMR Aug-2023 Release 1 allows local attackers to call endCall API without permission.

Vendor-Samsung Samsung Electronics

Product-android Samsung Mobile Devices

Matching Score-8

Assigner-Samsung Mobile

Matching Score-8

Assigner-Samsung Mobile

CVSS Score-4.3||MEDIUM

EPSS-0.05% / 13.79%

||

7 Day CHG~0.00%

Published-06 Jul, 2023 | 02:44

Updated-24 Oct, 2024 | 17:47

Improper access control vulnerability in PersonaManagerService prior to SMR Jul-2023 Release 1 allows local attackers to change confiugration.

Vendor-Samsung Samsung Electronics

Product-android Samsung Mobile Devices

Matching Score-8

Assigner-Samsung Mobile

Matching Score-8

Assigner-Samsung Mobile

CVSS Score-4||MEDIUM

EPSS-0.02% / 4.31%

||

7 Day CHG~0.00%

Published-08 Apr, 2025 | 04:39

Updated-08 Apr, 2025 | 18:23

Improper handling of insufficient permission in Samsung Device Health Manager Service prior to SMR Apr-2025 Release 1 allows local attackers to access provider in SDMHS.

Vendor-Samsung Electronics

Product-Samsung Mobile Devices

Matching Score-8

Assigner-Samsung Mobile

Matching Score-8

Assigner-Samsung Mobile

CVSS Score-5.9||MEDIUM

EPSS-0.09% / 26.94%

||

7 Day CHG~0.00%

Published-02 Jul, 2024 | 09:23

Updated-02 Aug, 2024 | 02:59

Improper access control in KnoxCustomManagerService prior to SMR Jul-2024 Release 1 allows local attackers to configure Knox privacy policy.

Vendor-Samsung Samsung Electronics

Product-android Samsung Mobile Devices