Samsung Vulnerabilidad

Cronología

Escribe

Producto

Samsung Mobile Devices244
Samsung Smart Phone166
Samsung SmartThings Hub STH-ETH-25037
Samsung Mobile Device26
Samsung Exynos Modem 530018

Contramedidas

Official Fix771
Temporary Fix0
Workaround10
Unavailable10
Not Defined382

Explotabilidad

High5
Functional2
Proof-of-Concept29
Unproven4
Not Defined1133

Vector de acceso

Not Defined0
Physical107
Local564
Adjacent116
Network386

Autenticación

Not Defined0
High70
Low622
None481

La interacción del usuario

Not Defined0
Required97
None1076

C3BM Index

CVSSv3 Base

≤10
≤29
≤347
≤4190
≤5185
≤6268
≤7214
≤8120
≤9111
≤1029

CVSSv3 Temp

≤10
≤29
≤352
≤4192
≤5191
≤6268
≤7218
≤8109
≤9106
≤1028

VulDB

≤10
≤216
≤379
≤4260
≤5118
≤6382
≤796
≤8182
≤918
≤1022

NVD

≤10
≤20
≤326
≤471
≤534
≤6100
≤758
≤8220
≤950
≤10128

CNA

≤10
≤216
≤320
≤4162
≤584
≤690
≤771
≤845
≤936
≤1016

Proveedor

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Explotar día 0

<1k489
<2k402
<5k273
<10k4
<25k3
<50k0
<100k1
≥100k1

Explotar hoy

<1k1104
<2k59
<5k9
<10k0
<25k0
<50k0
<100k1
≥100k0

Explotar el volumen del mercado

🔴 CTI Ocupaciones

Affected Products (388): 840 EVO (2), 850 EVO (1), 850 Pro (2), A3 (1), A5 (1), A7 (1), A8+ (1), APAService (1), AR Emoji (1), AR Emoji Editor (1), Accessibility (1), Account (18), ActivityManagerService (1), ActivityMetricsLogger (1), Android USB Driver Windows Installer (1), ApkInstaller (1), AppLock (3), Apps Edge Application (1), Automotive Processor (6), BL31 (1), Baseband (1), Billing (1), Bixby (2), Bixby Routines (1), BixbyTouch (2), Bixby Vision (2), Bixby Voice (2), Blockchain Keystore (6), BlockchainTZService (2), Blockchain Wallet (1), Bluetooth (4), Bluetooth API (1), BluetoothSettingsProvider (2), CMFA Framework (1), CPLC (1), CVA6 (1), Calendar (2), Camera (1), Cameralyzer (2), CertInstaller (1), Charm (5), Checkout (2), Chromebox 3 (1), Cloud (4), Contacts (1), Contacts Provider (1), Contents To Window (1), Core Service (1), Create Movie (1), Crucial MX100 (1), Crucial MX200 (1), Crucial MX300 (1), Customization Service (1), DDR4 (1), DPU Driver (1), DSP Driver (5), DSP Kernel Driver (1), DSP driver (1), DVR (1), DVR SHR2040 (1), DVR Web Viewer (1), Data Management Server (1), DeX Home (1), DeX for PC (1), DesktopSystemUI (1), Device (3), Dex (1), Dex for PC (2), Dialer (2), Dialer Application (1), DisplayManagerService (1), Display Solutions App (1), DisplayToast (1), DofViewer (1), Dressroom (1), Drive Manager (1), Editor Lite (2), Email (6), Experience Service (1), Exynos 850 (4), Exynos 980 (16), Exynos 1080 (16), Exynos 1280 (6), Exynos 2200 (6), Exynos 4412 (2), Exynos 9110 (7), Exynos Auto T512 (1), Exynos Auto T5123 (12), Exynos Auto T5124 (1), Exynos Auto T5125 (1), Exynos Auto T5126 (1), Exynos Baseband (1), Exynos CP Booting Driver (1), Exynos CP Chipset (2), Exynos Mobile Processor (6), Exynos Modem 5123 (11), Exynos Modem 5300 (18), Exynos W920 (4), Exynos fimg2d Driver (3), FactoryAirCommnadManger (2), FactoryCamera (3), FactoryCameraFB (2), FeedsInfo (1), FilterProvider (2), Find My Mobile (3), Find my Mobile (1), Fingerprint Matching Algorithm (1), Flow (3), Flow Application (1), Flow Mobile Application (1), Flow for PC (1), GALAXY Apps (5), Galaxy (13), Galaxy A3 (1), Galaxy Buds Pro Manage (1), Galaxy Friends (1), Galaxy Gear (4), Galaxy Note 2 (2), Galaxy Note 4 (1), Galaxy Note 5 (1), Galaxy Note 8 (1), Galaxy S (2), Galaxy S2 I9100XWKI4 (1), Galaxy S3 (6), Galaxy S3 Plugin (1), Galaxy S3 i9305 (2), Galaxy S4 (8), Galaxy S5 (1), Galaxy S6 (14), Galaxy S6 Edge (2), Galaxy S8 (2), Galaxy S8 Plus (2), Galaxy S8+ (1), Galaxy S9 (3), Galaxy S10 (2), Galaxy S20 (1), Galaxy S21 (1), Galaxy S22 (1), Galaxy Store (10), Galaxy Themes (3), Galaxy Watch3 PlugIn (1), Galaxy Watch3 Plugin (1), Galaxy Watch PlugIn (1), Galaxy Watch Plugin (2), Galaxy Wearable (1), Gallery (2), Game Launcher (1), Game Optimizing Service (1), Gear (1), Gear IconX PC Manager (2), Gear S Plugin (1), Global (1), Group Sharing (4), HDCP (1), HDCP LDFW (1), Health (4), ICCC TA (1), ION driver (1), IP Camera (1), ImsService (1), InputManagerService (1), Internet (15), Internet Browser (4), J2 Pro (1), J3 (2), J4 (2), J5 (2), J6 (2), J7 Duo (1), J7 Max (1), J7 Neo (4), J7 Pro (2), KIES (2), KME Module (1), KNOX (4), KfaOptions (1), Kies (3), Kies Air (2), Knox Guard (1), Knox Manage (1), KnoxSDK (1), Knox VPN (1), LDFW (2), LED 3D Smart TV (1), LPDDR4 (1), LSOItemData (1), Laser Printers (1), LauncherProvider (1), Link to Windows Service (1), Lock App (1), Low-Battery Dumpstate Log (1), MFC Driver (1), ML-85P Printer Driver (1), Magician (1), Managed Provisioning (1), Mask App (1), MediaMonitorDimension (1), MediaMonitorEvent (1), Mediatek RRC Protocol Stack (1), Members (7), Members samsungrewards Scheme for Deeplink (1), Message (1), Mobile (1), Mobile Device (26), Mobile Devices (244), Mobile Phone (4), Mobile Print (1), Mobile S7 (1), MobileWips App (1), Modem Interface Driver (3), Modem for Exynos Modem 5123 (6), MyFiles (1), My Files (1), NET-i viewer (4), NPU Driver (4), NPU Firmware (1), NT14U (1), NVR (1), NetworkPolicyManagerService (1), Nexus (1), Note (15), Note 3 (5), Note 10 (1), Note 20 (1), Notes (5), One Hand Operation (1), One UI Home (2), PENUP (1), PM851 (2), PS50C7700 (1), PackageManager (1), Pass (7), Pay (5), Pay Mini Application (3), PersonaManagerService (2), Phone (3), Portable SSD T5 PC (1), Printer (1), Product (1), Property Settings (1), Qualcomm Modem (1), QuickShare (1), Quick Share (1), Quick Share Agent (1), Quram Agif Library (2), RKP (1), RKP API (1), Reminder (1), RemoteViews (1), S4 GT-I9500 (2), S6 Edge (2), S7 (3), S7 Edge (4), S9+ (1), S10 (1), S Assistant (2), SBeam (1), SCX-6x55X (1), SCX-824 (1), SCX-6545X (1), SDP SDK (1), SECRIL (1), SELinux Policy (1), SEM TA (1), SMP SDK (1), SRN-1670D (4), SReminder (1), S Secure (3), SamsungCapture (1), SamsungContacts (1), SamsungDive (2), Samsung Email (1), Samsung Pass (1), SamsungRecovery (1), Samsung Security Manager (1), ScanPool (1), Scx-4200_driver (1), SecSettings (1), SecSettingsetelligence (1), SecTelephonyProvider (1), Seceon aiSIEM (1), Secure Folder (2), Security Manager (1), Security Mode Command Process (1), Security Supporter (1), SemBlurInfo (1), SemIWCMonitor (1), SemRewardManager (1), SemSuspendDialogInfo (1), SemWifiApBroadcastReceiver (1), Settings (2), Setup Wizard (1), Shannon Baseband (1), ShareLive (1), Slow Motion Editor (1), Smart Capture (1), SmartEther SS6215S Switch (1), Smart Manager (1), Smart Phone (166), Smart Switch PC (3), SmartTagPlugin (2), Smart Things (4), SmartThings (13), SmartThings Hub (3), SmartThings Hub STH-ETH-250 (37), Smart Touch Call (1), Smart View (1), SmartViewer (4), Smart Viewer (2), Smartphone (18), StickerCenter (1), Store (1), StroageManager (1), StroageManagerService (1), SyncThru 6 (1), Syncthru Web Service (2), SystemUI (2), T3 (1), T5 (1), TEEGRIS Secure OS (1), TIMA Trustlet (1), TV (4), Tab A (1), Tags (1), Telephony (1), TelephonyManager (1), TencentWifiSecurity (1), Text-to-speech Engine App (1), Themes (1), Tizen (13), TizenRT (4), UE55ES6800 (1), UPHelper Library (1), USB Driver Windows Installer for Mobile Phones (1), UWB Firmware (1), UWB Stack (1), Update (2), Update Setup (1), VerifyCredentialResponse (1), Video Player (1), Vision DSP Kernel Driver (1), Voice Note (1), Watch Active2 PlugIn (1), Watch Active2 Plugin (1), Watch Active PlugIn (1), Watch Active Plugin (1), Waterplugin (3), Wear OS (5), Wearable Manager Installer (1), Weather (1), Weather App (1), Wi-Fi Service (1), Widevine TA Log (1), Widevine Trustlet (2), X10P (1), X12 (1), X14H (1), X14J (1), X7400GX Syncthru (4), XCover4 (3), XCover 4 (1), Xpress M288OFW (1), aviextractor (3), hdcp2 device node (1), iPOLiS Device Manager (3), ipcdump (1), j3popeltecan (1), j7popeltemtr (1), keymaster (1), libsaacextractor.so (1), libsapeextractor (4), libsaviextractor.so Library (1), libsflvextractor (1), libsimba (15), libsmkvextractor (3), libswmfextractor (2), livfivextractor (1), m2m1shot Driver Framework (1), mTower (13), media.extractor Library (1), on7xeltelgt (1), on7xelteskt (1), ril Property Setting (1), sdp Driver (1), sec_log (1), softsimd (1), wmfextractor (1), wssyncmlnps (1)

Link to Vendor Website: https://www.samsung.com/

Fecha de publicaciónBaseTempVulnerabilidadProdExpConCTIEPSSCVE
2023-05-093.53.5Samsung Exynos 1080 Network Interface Local Privilege EscalationDesconocidoNot DefinedNot Defined0.240.00043CVE-2023-29092
2023-05-054.94.8Samsung Smart Phone FactoryTest Application escalada de privilegiosSmartphone Operating SystemNot DefinedOfficial Fix0.030.00042CVE-2023-21502
2023-05-057.47.3Samsung Smart Phone mPOS Fiserve Trustlet escalada de privilegiosSmartphone Operating SystemNot DefinedOfficial Fix0.040.00042CVE-2023-21501
2023-05-054.14.1Samsung Smart Phone mPOS TUI Trustlet setPinPadImages desbordamiento de búferSmartphone Operating SystemNot DefinedOfficial Fix0.050.00042CVE-2023-21500
2023-05-057.47.3Samsung Smart Phone mPOS TUI Trustlet TA_Communication_mpos_encrypt_pin desbordamiento de búferSmartphone Operating SystemNot DefinedOfficial Fix0.120.00042CVE-2023-21499
2023-05-056.96.8Samsung Smart Phone mPOS TUI Trustlet setPartnerTAInfo desbordamiento de búferSmartphone Operating SystemNot DefinedOfficial Fix0.180.00042CVE-2023-21498
2023-05-053.33.3Samsung Smart Phone mPOS TUI Trustlet Format StringSmartphone Operating SystemNot DefinedOfficial Fix0.210.00042CVE-2023-21497
2023-05-055.15.0Samsung Smart Phone GearManagerStub escalada de privilegiosSmartphone Operating SystemNot DefinedOfficial Fix0.020.00042CVE-2023-21490
2023-05-056.05.9Samsung Smart Phone SemShareFileProvider escalada de privilegiosSmartphone Operating SystemNot DefinedOfficial Fix0.140.00042CVE-2023-21493
2023-05-056.96.8Samsung Smart Phone ThemeManager escalada de privilegiosSmartphone Operating SystemNot DefinedOfficial Fix0.050.00042CVE-2023-21491
2023-05-053.63.6Samsung Smart Phone Knox Enrollment Service escalada de privilegiosSmartphone Operating SystemNot DefinedOfficial Fix0.050.00043CVE-2023-21495
2023-05-056.76.6Samsung Smart Phone Bootloader desbordamiento de búferSmartphone Operating SystemNot DefinedOfficial Fix0.030.00055CVE-2023-21489
2023-05-054.94.8Samsung Smart Phone Tips escalada de privilegiosSmartphone Operating SystemNot DefinedOfficial Fix0.050.00042CVE-2023-21488
2023-05-055.25.1Samsung Smart Phone Telephony Framework escalada de privilegiosSmartphone Operating SystemNot DefinedOfficial Fix0.090.00042CVE-2023-21487
2023-05-053.33.3Samsung Smart Phone divulgación de informaciónSmartphone Operating SystemNot DefinedOfficial Fix0.320.00060CVE-2023-21492
2023-05-055.25.1Samsung Smart Phone AppLock escalada de privilegiosSmartphone Operating SystemNot DefinedOfficial Fix0.120.00042CVE-2023-21484
2023-05-054.74.6Samsung Core Service escalada de privilegiosDesconocidoNot DefinedOfficial Fix0.120.00048CVE-2023-21505
2023-05-056.56.3Samsung Smart Phone ActivityManagerService Local Privilege EscalationSmartphone Operating SystemNot DefinedOfficial Fix0.080.00043CVE-2023-21496
2023-05-055.65.5Samsung Smart Phone Shannon Baseband mm_Plmncoordination.c desbordamiento de búferSmartphone Operating SystemNot DefinedOfficial Fix0.020.00123CVE-2023-21504
2023-05-055.65.5Samsung Smart Phone Shannon Baseband mm_LteInterRatManagement.c desbordamiento de búferSmartphone Operating SystemNot DefinedOfficial Fix0.050.00123CVE-2023-21503
2023-05-055.65.5Samsung Smart Phone Shannon Baseband mm_Authentication.c desbordamiento de búferSmartphone Operating SystemNot DefinedOfficial Fix0.000.00123CVE-2023-21494
2023-05-053.33.3Samsung Blockchain Keystore CMD_COLDWALLET_BTC_SET_PRV_UTXO divulgación de informaciónDesconocidoNot DefinedOfficial Fix0.030.00042CVE-2023-21511
2023-05-053.33.3Samsung Blockchain Keystore BC_TUI_CMD_UPDATE_SCREEN divulgación de informaciónDesconocidoNot DefinedOfficial Fix0.030.00042CVE-2023-21510
2023-05-056.76.5Samsung Blockchain Keystore BC_TUI_CMD_UPDATE_SCREEN desbordamiento de búferDesconocidoNot DefinedOfficial Fix0.020.00042CVE-2023-21509
2023-05-053.83.8Samsung Smart Phone Call Setting ImagePreviewActivity divulgación de informaciónSmartphone Operating SystemNot DefinedOfficial Fix0.030.00052CVE-2023-21486
2023-05-053.83.8Samsung Smart Phone Call Setting VideoPreviewActivity divulgación de informaciónSmartphone Operating SystemNot DefinedOfficial Fix0.060.00052CVE-2023-21485
2023-05-056.76.5Samsung Blockchain Keystore BC_TUI_CMD_SEND_RESOURCE_DATA desbordamiento de búferDesconocidoNot DefinedOfficial Fix0.020.00042CVE-2023-21508
2023-05-053.33.3Samsung Blockchain Keystore BC_TUI_CMD_SEND_RESOURCE_DATA_ARRAY divulgación de informaciónDesconocidoNot DefinedOfficial Fix0.030.00042CVE-2023-21507
2023-05-056.76.5Samsung Blockchain Keystore BC_TUI_CMD_SEND_RESOURCE_DATA_ARRAY desbordamiento de búferDesconocidoNot DefinedOfficial Fix0.050.00042CVE-2023-21506
2023-04-156.36.2Samsung Exynos Auto T5123 SIP URI Decoder desbordamiento de búferDesconocidoNot DefinedOfficial Fix0.030.00046CVE-2023-29091
2023-04-156.76.7Samsung Exynos Auto T5123 SIP Via Header Decoder desbordamiento de búferDesconocidoNot DefinedOfficial Fix0.000.00046CVE-2023-29090
2023-04-156.76.7Samsung Exynos Auto T5123 SIP Multipart Message Decoder desbordamiento de búferDesconocidoNot DefinedOfficial Fix0.260.00046CVE-2023-29089
2023-04-156.76.7Samsung Exynos Auto T5123 SIP Session-Expires Header Decoder desbordamiento de búferDesconocidoNot DefinedOfficial Fix0.260.00046CVE-2023-29088
2023-04-156.76.7Samsung Exynos Auto T5123 SIP Retry-After Header Decoder desbordamiento de búferDesconocidoNot DefinedOfficial Fix0.290.00046CVE-2023-29087
2023-04-156.76.7Samsung Exynos Auto T5123 SIP Min-SE Header Decoder desbordamiento de búferDesconocidoNot DefinedOfficial Fix0.040.00046CVE-2023-29086
2023-04-156.36.2Samsung Exynos Auto T5123 SIP Status Line desbordamiento de búferDesconocidoNot DefinedOfficial Fix0.030.00046CVE-2023-29085
2023-04-046.36.3Samsung Exynos 1280/Exynos 2200/Exynos Modem 5300 IPv4 Fragmentation desbordamiento de búferDesconocidoNot DefinedNot Defined0.030.00068CVE-2023-28613
2023-03-284.24.1Samsung Galaxy S21 RedirectSmartphone Operating SystemNot DefinedOfficial Fix0.040.00045CVE-2022-1230
2023-03-237.97.9Samsung Exynos Auto T5124 SDP Module desbordamiento de búferDesconocidoNot DefinedNot Defined0.030.00085CVE-2023-26496
2023-03-238.68.6Samsung Exynos Auto T5126 SDP Module desbordamiento de búferDesconocidoNot DefinedNot Defined0.040.00084CVE-2023-26498
2023-03-228.68.6Samsung Exynos Auto T5125 Video Configuration Attribute desbordamiento de búferDesconocidoNot DefinedNot Defined0.000.00067CVE-2023-26497
2023-03-174.14.1Samsung BixbyTouch escalada de privilegiosDesconocidoNot DefinedOfficial Fix0.060.00052CVE-2023-21465
2023-03-173.93.8Samsung Calendar escalada de privilegiosCalendar SoftwareNot DefinedOfficial Fix0.000.00042CVE-2023-21464
2023-03-174.34.2Samsung Smart Phone Settings AutoPowerOnOffConfirmDialog escalada de privilegiosSmartphone Operating SystemNot DefinedOfficial Fix0.000.00042CVE-2023-21461
2023-03-172.42.3Samsung Smart Phone Samsung Keyboard escalada de privilegiosSmartphone Operating SystemNot DefinedOfficial Fix0.040.00044CVE-2023-21454
2023-03-174.94.9Samsung Smart Phone SoftSim TA escalada de privilegiosSmartphone Operating SystemNot DefinedOfficial Fix0.250.00042CVE-2023-21453
2023-03-174.34.2Samsung Smart Phone Call Application divulgación de informaciónSmartphone Operating SystemNot DefinedOfficial Fix0.040.00042CVE-2023-21449
2023-03-174.54.5Samsung Smart Phone SecSettings autenticación débilSmartphone Operating SystemNot DefinedOfficial Fix0.050.00043CVE-2023-21460
2023-03-176.26.2Samsung Smart Phone Decon Driver desbordamiento de búferSmartphone Operating SystemNot DefinedOfficial Fix0.050.00071CVE-2023-21459
2023-03-174.34.2Samsung Smart Phone System UI escalada de privilegiosSmartphone Operating SystemNot DefinedOfficial Fix0.000.00043CVE-2023-21458

1123 no se muestran más entradas

Want to stay up to date on a daily basis?

Enable the mail alert feature now!