PT-2023-23160 · Samsung · Samsung Exynos Modem
CVE-2023-31116
·
Publicado
2023-06-07
·
Atualizado
2025-01-07
CVSS v3.1
9.8
Crítica
| Vetor | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Samsung Exynos Modem versions 5123 through 5300
Description
An issue was discovered in the Shannon RCS component. An incorrect default permission can cause unintended querying of RCS capability via a crafted application.
Recommendations
For Samsung Exynos Modem versions 5123 through 5300, consider restricting access to the Shannon RCS component until a patch is available.
As a temporary workaround, avoid using applications that may exploit the incorrect default permission in the Shannon RCS component.
Correção
Incorrect Default Permissions
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Samsung Exynos Modem