CVE-2023-42549: Medium severity samsung account sdk vulnerability
Use of implicit intent for sensitive communication vulnerability in startNameValidationActivity in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-42549?
CVE-2023-42549 is a vulnerability in Samsung Account that allows attackers to access arbitrary files using an implicit intent for sensitive communication in the startNameValidationActivity function.
How severe is CVE-2023-42549?
CVE-2023-42549 has a severity score of 6.5, which is considered medium severity.
Which version of Samsung Account is affected by CVE-2023-42549?
Samsung Account versions up to and excluding 14.5.00.7 are affected by CVE-2023-42549.
How can attackers exploit CVE-2023-42549?
Attackers can exploit CVE-2023-42549 by using an implicit intent for sensitive communication in the startNameValidationActivity function to gain access to arbitrary files with Samsung Account privilege.
Is there a fix for CVE-2023-42549?
It is recommended to update Samsung Account to version 14.5.00.7 or later to fix CVE-2023-42549.