Main Vulnerability Database SB2023110739

SB2023110739 - Use of Implicit Intent for Sensitive Communication in Samsung EasySetup

Published: November 7, 2023

Security Bulletin ID SB2023110739

Severity

Medium

Patch available

YES

Number of vulnerabilities 1

Exploitation vector Remote access

Highest impact Information disclosure

Description

This security bulletin contains information about 1 security vulnerability.

1) Use of Implicit Intent for Sensitive Communication (CVE-ID: CVE-2023-42555)

The vulnerability allows a remote attacker to compromise the target system.

The vulnerability exists due to use of implicit intent for sensitive communication. A remote attacker can get the bluetooth address of user device.

Install update from vendor's website.