CVE-2023-43122
First published: Wed Dec 13 2023(Updated: )
Samsung Mobile Processor and Wearable Processor (Exynos 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, and W920) allow Information Disclosure in the Bootloader.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| All of | ||
| Samsung Exynos 980 | ||
| Samsung Exynos 980 Firmware | ||
| All of | ||
| Samsung Exynos 850 Firmware | ||
| Samsung Exynos 850 Firmware | ||
| All of | ||
| Samsung Exynos 1080 Firmware | ||
| Samsung Exynos 1080 Firmware | ||
| All of | ||
| Samsung Exynos 2100 firmware | ||
| Samsung Exynos 2100 firmware | ||
| All of | ||
| Samsung Exynos 2200 firmware | ||
| Samsung Exynos 2200 firmware | ||
| All of | ||
| Samsung Exynos 1280 Firmware | ||
| Samsung Exynos 1280 Firmware | ||
| All of | ||
| Samsung Exynos 1380 firmware | ||
| Samsung Mobile Processor Exynos 1380 | ||
| All of | ||
| Samsung Exynos 1330 Firmware | ||
| Samsung Exynos 1330 Firmware | ||
| All of | ||
| Samsung Exynos W920 firmware | ||
| Samsung Exynos W920 firmware |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2023-43122?
CVE-2023-43122 is classified as a medium severity vulnerability due to the potential for information disclosure.
How do I fix CVE-2023-43122?
To mitigate CVE-2023-43122, users should ensure their devices are updated with the latest firmware provided by Samsung.
What types of devices are affected by CVE-2023-43122?
CVE-2023-43122 affects various Samsung Mobile Processors and Wearable Processors including Exynos 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, and W920.
What does information disclosure mean in the context of CVE-2023-43122?
In the context of CVE-2023-43122, information disclosure means that sensitive data may be accessible to unauthorized users through the bootloader.
Is CVE-2023-43122 a remote exploit vulnerability?
CVE-2023-43122 is not classified as a remote exploit vulnerability; it requires local access to the affected device to be exploited.
- collector/mitre-cve
- agent/event
- agent/type
- agent/last-modified-date
- agent/first-publish-date
- agent/weakness
- agent/severity
- agent/references
- agent/author
- agent/description
- agent/tags
- agent/softwarecombine
- collector/nvd-api
- agent/software-canonical-lookup-request
- vendor/samsung
- canonical/samsung exynos 980
- canonical/samsung exynos 980 firmware
- canonical/samsung exynos 850 firmware
- canonical/samsung exynos 1080 firmware
- canonical/samsung exynos 2100 firmware
- canonical/samsung exynos 2200 firmware
- canonical/samsung exynos 1280 firmware
- canonical/samsung exynos 1380 firmware
- canonical/samsung mobile processor exynos 1380
- canonical/samsung exynos 1330 firmware
- canonical/samsung exynos w920 firmware