Main Vulnerability Database Vulnerabilities #VU76975

Improper Privilege Management in Samsung Mobile Firmware - CVE-2023-21513

Published: June 6, 2023

Vulnerability identifier: #VU76975

CSH Severity: Low

CVSSv4.0: CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:U/U:Clear

CVE-ID: CVE-2023-21513

CWE-ID: CWE-269

Exploitation vector: Local access

Exploit availability: No public exploit available

Vulnerable software:
Samsung Mobile Firmware

Software vendor:
Samsung

Description

The vulnerability allows an attacker to escalate privileges on the device.

The vulnerability exists due to improper privilege management in CC Mode. An attacker with physical access to device can escalate privileges.

Install updates from vendor's website.