CVE-2023-21457: High severity samsung android vulnerability
Published Mar 16, 2023
·Updated
Improper access control vulnerability in Bluetooth prior to SMR Mar-2023 Release 1 allows attackers to send file via Bluetooth without related permission.
Affected Software
48 affected components
Samsung android=11.0
Samsung android=11.0-smr-apr-2021-r1
Samsung android=11.0-smr-apr-2022-r1
Samsung android=11.0-smr-aug-2021-r1
Samsung android=11.0-smr-aug-2022-r1
Samsung android=11.0-smr-dec-2020-r1
Samsung android=11.0-smr-dec-2021-r1
Samsung android=11.0-smr-dec-2022-r1
Samsung android=11.0-smr-feb-2021-r1
Samsung android=11.0-smr-feb-2022-r1
Samsung android=11.0-smr-feb-2023-r1
Samsung android=11.0-smr-jan-2021-r1
Samsung android=11.0-smr-jan-2022-r1
Samsung android=11.0-smr-jul-2021-r1
Samsung android=11.0-smr-jul-2022-r1
Samsung android=11.0-smr-jun-2021-r1
Samsung android=11.0-smr-jun-2022-r1
Samsung android=11.0-smr-mar-2021-r1
Samsung android=11.0-smr-mar-2022-r1
Samsung android=11.0-smr-may-2021-r1
Samsung android=11.0-smr-may-2022-r1
Samsung android=11.0-smr-nov-2021-r1
Samsung android=11.0-smr-nov-2022-r1
Samsung android=11.0-smr-oct-2021-r1
Samsung android=11.0-smr-oct-2022-r1
Samsung android=11.0-smr-sep-2021-r1
Samsung android=11.0-smr-sep-2022-r1
Samsung android=12.0
Samsung android=12.0-smr-apr-2022-r1
Samsung android=12.0-smr-aug-2022-r1
Samsung android=12.0-smr-dec-2021-r1
Samsung android=12.0-smr-dec-2022-r1
Samsung android=12.0-smr-feb-2022-r1
Samsung android=12.0-smr-feb-2023-r1
Samsung android=12.0-smr-jan-2022-r1
Samsung android=12.0-smr-jul-2022-r1
Samsung android=12.0-smr-jun-2022-r1
Samsung android=12.0-smr-mar-2022-r1
Samsung android=12.0-smr-may-2022-r1
Samsung android=12.0-smr-nov-2021-r1
Samsung android=12.0-smr-nov-2022-r1
Samsung android=12.0-smr-oct-2022-r1
Samsung android=12.0-smr-sep-2022-r1
Samsung android=13.0-smr-dec-2022-r1
Samsung android=13.0-smr-feb-2023-r1
Samsung android=13.0-smr-jan-2023-r1
Samsung android=13.0-smr-nov-2022-r1
Samsung android=13.0-smr-oct-2022-r1
Event History
Mar 16, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID of this security issue?
The vulnerability ID is CVE-2023-21457.
2
What is the severity score of CVE-2023-21457?
The severity score of CVE-2023-21457 is 8.1 (high).
3
What is the affected software version of CVE-2023-21457?
The affected software version of CVE-2023-21457 is Samsung Android 11.0 and 12.0.
4
How can an attacker exploit CVE-2023-21457?
An attacker can exploit CVE-2023-21457 by sending a file via Bluetooth without the required permission.
5
Is there a fix available for CVE-2023-21457?
Yes, a fix is available for CVE-2023-21457. Please refer to the official Samsung security update for more information.