CVE-2023-42551: Medium severity samsung account sdk vulnerability
Published Nov 7, 2023
·Updated
Use of implicit intent for sensitive communication vulnerability in startTncActivity in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege.
Affected Software
1 affected component
samsung Account<14.5.00.7
Event History
Nov 7, 2023
CVE Published
07:49 AM
Data Sourced
07:49 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2023-42551?
CVE-2023-42551 is a vulnerability that allows attackers to access arbitrary files with Samsung Account privilege.
2
What is the severity of CVE-2023-42551?
CVE-2023-42551 has a severity level of medium (6.5).
3
How does CVE-2023-42551 occur?
CVE-2023-42551 occurs due to the use of an implicit intent for sensitive communication in startTncActivity in Samsung Account.
4
Which versions of Samsung Account are affected by CVE-2023-42551?
Samsung Account versions prior to 14.5.00.7 are affected by CVE-2023-42551.
5
How can I fix CVE-2023-42551?
To fix CVE-2023-42551, update Samsung Account to version 14.5.00.7 or higher.