PT-2023-22925 · Samsung · Samsung Health

Published 2023-09-05 · Updated 2023-09-08 · CVE-2023-30723

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Samsung Health versions prior to 6.24.2.011

Description The issue is related to improper input validation, allowing attackers to write arbitrary files with Samsung Health privilege.

Recommendations For versions prior to 6.24.2.011, update to version 6.24.2.011 or later to resolve the issue.

Fix

Related Identifiers

CVE-2023-30723

Affected Products

Samsung Health

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2023-30723 · Security Note
• https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=09 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-30723 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1699306036111241524 · Twitter Post
• https://twitter.com/CVEnew/status/1699262741066776702 · Twitter Post
• https://t.me/cvenotify/57594 · Telegram Post