PT-2023-18233 · Google+1 · Android 12+2

Hackhackdump · Published 2023-03-16 · Updated 2023-03-23 · CVE-2023-21464

Positive Technologies (AI Summary)

CVSS v3.1

4.0

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Samsung Calendar versions prior to 12.4.02.9000 in Android 13 Samsung Calendar versions prior to 12.3.08.2000 in Android 12

Description The issue is related to improper access control, allowing a local attacker to configure an improper status. This could potentially lead to unauthorized access or modifications.

Recommendations For Samsung Calendar versions prior to 12.4.02.9000 in Android 13, update to version 12.4.02.9000 or later. For Samsung Calendar versions prior to 12.3.08.2000 in Android 12, update to version 12.3.08.2000 or later.

Fix

Improper Preservation of Permissions

Weakness Enumeration

CWE-281

Related Identifiers

CVE-2023-21464

Affected Products

Android 12

Android 13

Samsung Calendar

References · 4

• https://osv.dev/vulnerability/CVE-2023-21464 · Vendor Advisory
• https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=03 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-21464 · Security Note
• https://t.me/cibsecurity/60214 · Telegram Post