PT-2024-13969 · Samsung · Exynos 1380+13

Published 2024-06-05 · Updated 2024-06-25 · CVE-2023-50803

Positive Technologies (AI Summary)

CVSS v3.1

3.7

Low

Base vector

AC:H/AV:N/A:L/C:N/I:N/PR:N/S:U/UI:N

Name of the Vulnerable Software and Affected Versions Samsung Mobile Processor, Automotive Processor, and Modem Exynos versions 9820 through 9825 Samsung Mobile Processor, Automotive Processor, and Modem Exynos versions 980 Samsung Mobile Processor, Automotive Processor, and Modem Exynos versions 990 Samsung Mobile Processor, Automotive Processor, and Modem Exynos versions 850 Samsung Mobile Processor, Automotive Processor, and Modem Exynos versions 1080 Samsung Mobile Processor, Automotive Processor, and Modem Exynos versions 2100 Samsung Mobile Processor, Automotive Processor, and Modem Exynos versions 2200 Samsung Mobile Processor, Automotive Processor, and Modem Exynos versions 1280 Samsung Mobile Processor, Automotive Processor, and Modem Exynos versions 1380 Samsung Mobile Processor, Automotive Processor, and Modem Exynos versions 1330 Samsung Mobile Processor, Automotive Processor, and Modem Exynos Modem 5123 Samsung Mobile Processor, Automotive Processor, and Modem Exynos Modem 5300 Samsung Mobile Processor, Automotive Processor, and Modem Auto T5123

Description The baseband software does not properly check replay protection specified by the NAS (Non-Access-Stratum) module. This can lead to denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2023-50803

Affected Products

Auto T5123

Exynos 1080

Exynos 1280

Exynos 1330

Exynos 1380

Exynos 2100

Exynos 2200

Exynos 850

Exynos 980

Exynos 9820

Exynos 9825

Exynos 990

Exynos Modem 5123

Exynos Modem 5300

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2023-50803 · Security Note
• https://semiconductor.samsung.com/support/quality-support/product-security-updates · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1798452103515378010 · Twitter Post
• https://t.me/cvenotify/83638 · Telegram Post
• https://twitter.com/linuxpatch/status/1798446434900951327 · Twitter Post
• https://t.me/cvenotify/82091 · Telegram Post
• https://twitter.com/CVEnew/status/1798427365959496155 · Twitter Post