Main Vulnerability Database Vulnerabilities #VU76975

Improper Privilege Management in Samsung Mobile Firmware - CVE-2023-21513

Published: June 6, 2023

Vulnerability identifier: #VU76975

CSH Severity: Low

CVSS v4.0: CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: CVE-2023-21513

CWE-ID: CWE-269

Exploitation vector: Local access

Exploit availability: No public exploit available

Vendor: Samsung

Affected software:
Samsung Mobile Firmware

Detailed vulnerability description

The vulnerability allows an attacker to escalate privileges on the device.

The vulnerability exists due to improper privilege management in CC Mode. An attacker with physical access to device can escalate privileges.

Install updates from vendor's website.