PT-2023-28447 · Google+1 · Android 14+3

Elias Schröder · Publicado 2023-12-04 · Atualizado 2023-12-11 · CVE-2023-42577

Positive Technologies (AI Summary)

CVSS v3.1

6.8

Média

Vetor base

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Samsung Voice Recorder versions prior to 21.4.15.01 in Android 12 and Android 13 Samsung Voice Recorder versions prior to 21.4.50.17 in Android 14

Description The issue is related to improper access control in the Samsung Voice Recorder, allowing physical attackers to access Voice Recorder information on the lock screen.

Recommendations For Samsung Voice Recorder versions prior to 21.4.15.01 in Android 12 and Android 13, update to version 21.4.15.01 or later. For Samsung Voice Recorder versions prior to 21.4.50.17 in Android 14, update to version 21.4.50.17 or later.

Correção

Identificadores relacionados

CVE-2023-42577

Produtos afetados

Android 12

Android 13

Android 14

Samsung Voice Recorder

Referências · 6

• https://twitter.com/VulmonFeeds/status/1731984821717463140 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2023-42577 · Nota de Segurança
• https://t.me/cvenotify/63150 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-42577 · Aviso do Fabricante
• https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=12 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/1731869106528199018 · Publicação no Twitter