PT-2023-23160 · Samsung · Samsung Exynos Modem

Published 2023-06-07 · Updated 2025-01-07 · CVE-2023-31116

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Samsung Exynos Modem versions 5123 through 5300

Description An issue was discovered in the Shannon RCS component. An incorrect default permission can cause unintended querying of RCS capability via a crafted application.

Recommendations For Samsung Exynos Modem versions 5123 through 5300, consider restricting access to the Shannon RCS component until a patch is available. As a temporary workaround, avoid using applications that may exploit the incorrect default permission in the Shannon RCS component.

Fix

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2023-31116

Affected Products

Samsung Exynos Modem

References · 4

• https://semiconductor.samsung.com/support/quality-support/product-security-updates · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-31116 · Security Note
• https://t.me/cibsecurity/65054 · Telegram Post
• https://t.me/cvenotify/106582 · Telegram Post