CVE-2023-21464: Medium severity samsung calendar vulnerability
Published Mar 16, 2023
·Updated
Improper access control in Samsung Calendar prior to versions 12.4.02.9000 in Android 13 and 12.3.08.2000 in Android 12 allows local attacker to configure improper status.
Affected Software
4 affected components
Samsung Calendar<12.4.02.9000
Google Android=13.0
Samsung Calendar<12.3.08.2000
Google Android=12.0
Event History
Mar 16, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-21464?
CVE-2023-21464 has been assigned a moderate severity rating due to improper access control vulnerabilities.
2
How do I fix CVE-2023-21464?
To fix CVE-2023-21464, update Samsung Calendar to version 12.4.02.9000 or later on Android 13, or version 12.3.08.2000 or later on Android 12.
3
What types of devices are affected by CVE-2023-21464?
CVE-2023-21464 affects Samsung devices running vulnerable versions of Samsung Calendar on Android 12 and Android 13.
4
Can I be attacked using CVE-2023-21464 remotely?
No, CVE-2023-21464 requires local access to the device for exploitation.
5
What is the nature of the flaw in CVE-2023-21464?
CVE-2023-21464 involves improper access control that may allow local attackers to manipulate calendar settings.