PT-2023-22902 · Samsung+1 · Galaxy Book2 Pro 360+5

Mahdi Braik · Publicado 2023-08-10 · Atualizado 2023-08-15 · CVE-2023-30702

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Média

Vetor base

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SSHDCPAPP TA versions prior to "SAMSUNG ELECTONICS, CO, LTD. - System Hardware Update - 7/13/2023"

Description A stack overflow issue in SSHDCPAPP TA allows a local attacker to execute arbitrary code. This affects Windows Update for Galaxy book Go, Galaxy book Go 5G, Galaxy book2 Go, and Galaxy book2 Pro 360.

Recommendations For SSHDCPAPP TA versions prior to "SAMSUNG ELECTONICS, CO, LTD. - System Hardware Update - 7/13/2023", apply the "SAMSUNG ELECTONICS, CO, LTD. - System Hardware Update - 7/13/2023" update from Windows Update to resolve the issue.

Correção

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

CVE-2023-30702

Produtos afetados

Galaxy Book Go

Galaxy Book Go 5G

Galaxy Book2 Go

Galaxy Book2 Pro 360

Sshdcpapp Ta

Windows Update

Referências · 3

• https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=08 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2023-30702 · Nota de Segurança
• https://t.me/cibsecurity/68162 · Publicação no Telegram