PT-2023-22894 · Samsung+1 · Sshdcpapp Ta+1

Mahdi Braik · Publicado 2023-08-10 · Atualizado 2023-08-16 · CVE-2023-30695

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Média

Vetor base

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SSHDCPAPP TA versions prior to "SAMSUNG ELECTONICS, CO, LTD. - System Hardware Update - 7/13/2023"

Description The issue is an Out-of-bounds Write vulnerability that allows a local attacker to execute arbitrary code. This vulnerability affects certain Samsung Galaxy book models, including Galaxy book Go, Galaxy book Go 5G, Galaxy book2 Go, and Galaxy book2 Pro 360, when using Windows Update.

Recommendations For SSHDCPAPP TA versions prior to "SAMSUNG ELECTONICS, CO, LTD. - System Hardware Update - 7/13/2023", apply the "SAMSUNG ELECTONICS, CO, LTD. - System Hardware Update - 7/13/2023" update from Windows Update to resolve the issue.

Correção

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

CVE-2023-30695

Produtos afetados

Sshdcpapp Ta

Windows Update

Referências · 3

• https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=08 · Aviso do Fabricante
• https://t.me/cibsecurity/68149 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-30695 · Nota de Segurança