PT-2023-18231 · Google · Android 12+1

Dg · Publicado 2023-03-16 · Atualizado 2023-03-23 · CVE-2023-21462

Positive Technologies (AI Summary)

CVSS v3.1

4.2

Média

Vetor base

AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Quick Share Agent versions prior to 3.5.14.18 in Android 12 Quick Share Agent versions prior to 3.5.16.20 in Android 13

Description The issue allows a local attacker to access the MAC address without the required permission, potentially exposing sensitive information.

Recommendations For versions prior to 3.5.14.18 in Android 12, update to version 3.5.14.18 or later. For versions prior to 3.5.16.20 in Android 13, update to version 3.5.16.20 or later.

Correção

Enumeração de Fraquezas

CWE-215

Identificadores relacionados

CVE-2023-21462

Produtos afetados

Android 12

Android 13

Referências · 3

• https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=03 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-21462 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-21462 · Aviso do Fabricante