CVE-2023-21491 - Vulnerability Details

Vendors	Products
Samsung	Android

Link	Providers
https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Show plain JSON

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"state": "PUBLISHED", "cveId": "CVE-2023-21491", "assignerOrgId": "3af57064-a867-422c-b2ad-40307b65c458", "assignerShortName": "Samsung Mobile", "dateUpdated": "2025-02-12T16:14:53.453Z", "dateReserved": "2022-11-14T00:00:00.000Z", "datePublished": "2023-05-04T00:00:00.000Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "3af57064-a867-422c-b2ad-40307b65c458", "shortName": "Samsung Mobile", "dateUpdated": "2023-05-04T00:00:00.000Z"}, "descriptions": [{"lang": "en", "value": "Improper access control vulnerability in ThemeManager prior to SMR May-2023 Release 1 allows local attackers to write arbitrary files with system privilege."}], "affected": [{"vendor": "Samsung Mobile", "product": "Samsung Mobile Devices", "versions": [{"version": "Android 12, 13", "status": "affected", "lessThan": "SMR May-2023 Release 1", "versionType": "custom"}]}], "references": [{"url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05"}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:L", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "LOW", "integrityImpact": "HIGH", "availabilityImpact": "LOW", "baseScore": 8.5, "baseSeverity": "HIGH"}}], "problemTypes": [{"descriptions": [{"type": "CWE", "lang": "en", "description": "CWE-284 Improper Access Control", "cweId": "CWE-284"}]}], "source": {"discovery": "UNKNOWN"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T09:36:34.533Z"}, "title": "CVE Program Container", "references": [{"url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05", "tags": ["x_transferred"]}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-02-12T16:14:05.430391Z", "id": "CVE-2023-21491", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-02-12T16:14:53.453Z"}}]}}

{

dataType : CVE_RECORD (string)

dataVersion : 5.1 (string)

cveMetadata : { »

state : PUBLISHED (string)

cveId : CVE-2023-21491 (string)

assignerOrgId : 3af57064-a867-422c-b2ad-40307b65c458 (string)

assignerShortName : Samsung Mobile (string)

dateUpdated : 2025-02-12T16:14:53.453Z (string)

dateReserved : 2022-11-14T00:00:00.000Z (string)

datePublished : 2023-05-04T00:00:00.000Z (string)

}

containers : { »

cna : { »

providerMetadata : { »

orgId : 3af57064-a867-422c-b2ad-40307b65c458 (string)

shortName : Samsung Mobile (string)

dateUpdated : 2023-05-04T00:00:00.000Z (string)

}

descriptions : [ »

0 : { »

lang : en (string)

value : Improper access control vulnerability in ThemeManager prior to SMR May-2023 Release 1 allows local attackers to write arbitrary files with system privilege. (string)

}

]

affected : [ »

0 : { »

vendor : Samsung Mobile (string)

product : Samsung Mobile Devices (string)

versions : [ »

0 : { »

version : Android 12, 13 (string)

status : affected (string)

lessThan : SMR May-2023 Release 1 (string)

versionType : custom (string)

}

]

}

]

references : [ »

0 : { »

url : https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05 (string)

}

]

metrics : [ »

0 : { »

cvssV3_1 : { »

version : 3.1 (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:L (string)

attackVector : LOCAL (string)

attackComplexity : LOW (string)

privilegesRequired : NONE (string)

userInteraction : NONE (string)

scope : CHANGED (string)

confidentialityImpact : LOW (string)

integrityImpact : HIGH (string)

availabilityImpact : LOW (string)

baseScore : 8.5 (number)

baseSeverity : HIGH (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

type : CWE (string)

lang : en (string)

description : CWE-284 Improper Access Control (string)

cweId : CWE-284 (string)

}

]

}

]

source : { »

discovery : UNKNOWN (string)

}

adp : [ »

0 : { »

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T09:36:34.533Z (string)

}

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05 (string)

tags : [ »

0 : x_transferred (string)

]

}

]

}

1 : { »

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

timestamp : 2025-02-12T16:14:05.430391Z (string)

id : CVE-2023-21491 (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

role : CISA Coordinator (string)

version : 2.0.3 (string)

}

]

title : CISA ADP Vulnrichment (string)

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-02-12T16:14:53.453Z (string)

}

]

}

Show plain JSON

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05", "tags": ["x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-02T09:36:34.533Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2023-21491", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-02-12T16:14:05.430391Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-02-12T16:14:50.271Z"}}], "cna": {"source": {"discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.5, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:L", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}], "affected": [{"vendor": "Samsung Mobile", "product": "Samsung Mobile Devices", "versions": [{"status": "affected", "version": "Android 12, 13", "lessThan": "SMR May-2023 Release 1", "versionType": "custom"}]}], "references": [{"url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05"}], "descriptions": [{"lang": "en", "value": "Improper access control vulnerability in ThemeManager prior to SMR May-2023 Release 1 allows local attackers to write arbitrary files with system privilege."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-284", "description": "CWE-284 Improper Access Control"}]}], "providerMetadata": {"orgId": "3af57064-a867-422c-b2ad-40307b65c458", "shortName": "Samsung Mobile", "dateUpdated": "2023-05-04T00:00:00.000Z"}}}, "cveMetadata": {"cveId": "CVE-2023-21491", "state": "PUBLISHED", "dateUpdated": "2025-02-12T16:14:53.453Z", "dateReserved": "2022-11-14T00:00:00.000Z", "assignerOrgId": "3af57064-a867-422c-b2ad-40307b65c458", "datePublished": "2023-05-04T00:00:00.000Z", "assignerShortName": "Samsung Mobile"}, "dataVersion": "5.1"}

{

dataType : CVE_RECORD (string)

containers : { »

adp : [ »

0 : { »

title : CVE Program Container (string)

references : [ »

0 : { »

url : https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05 (string)

tags : [ »

0 : x_transferred (string)

]

}

]

providerMetadata : { »

orgId : af854a3a-2127-422b-91ae-364da2661108 (string)

shortName : CVE (string)

dateUpdated : 2024-08-02T09:36:34.533Z (string)

}

1 : { »

title : CISA ADP Vulnrichment (string)

metrics : [ »

0 : { »

other : { »

type : ssvc (string)

content : { »

id : CVE-2023-21491 (string)

role : CISA Coordinator (string)

options : [ »

0 : { »

Exploitation : none (string)

}

1 : { »

Automatable : no (string)

}

2 : { »

Technical Impact : total (string)

}

]

version : 2.0.3 (string)

timestamp : 2025-02-12T16:14:05.430391Z (string)

}

]

providerMetadata : { »

orgId : 134c704f-9b21-4f2e-91b3-4a467353bcc0 (string)

shortName : CISA-ADP (string)

dateUpdated : 2025-02-12T16:14:50.271Z (string)

}

]

cna : { »

source : { »

discovery : UNKNOWN (string)

}

metrics : [ »

0 : { »

cvssV3_1 : { »

scope : CHANGED (string)

version : 3.1 (string)

baseScore : 8.5 (number)

attackVector : LOCAL (string)

baseSeverity : HIGH (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:L (string)

integrityImpact : HIGH (string)

userInteraction : NONE (string)

attackComplexity : LOW (string)

availabilityImpact : LOW (string)

privilegesRequired : NONE (string)

confidentialityImpact : LOW (string)

}

]

affected : [ »

0 : { »

vendor : Samsung Mobile (string)

product : Samsung Mobile Devices (string)

versions : [ »

0 : { »

status : affected (string)

version : Android 12, 13 (string)

lessThan : SMR May-2023 Release 1 (string)

versionType : custom (string)

}

]

}

]

references : [ »

0 : { »

url : https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05 (string)

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Improper access control vulnerability in ThemeManager prior to SMR May-2023 Release 1 allows local attackers to write arbitrary files with system privilege. (string)

}

]

problemTypes : [ »

0 : { »

descriptions : [ »

0 : { »

lang : en (string)

type : CWE (string)

cweId : CWE-284 (string)

description : CWE-284 Improper Access Control (string)

}

]

}

]

providerMetadata : { »

orgId : 3af57064-a867-422c-b2ad-40307b65c458 (string)

shortName : Samsung Mobile (string)

dateUpdated : 2023-05-04T00:00:00.000Z (string)

}

cveMetadata : { »

cveId : CVE-2023-21491 (string)

state : PUBLISHED (string)

dateUpdated : 2025-02-12T16:14:53.453Z (string)

dateReserved : 2022-11-14T00:00:00.000Z (string)

assignerOrgId : 3af57064-a867-422c-b2ad-40307b65c458 (string)

datePublished : 2023-05-04T00:00:00.000Z (string)

assignerShortName : Samsung Mobile (string)

}

dataVersion : 5.1 (string)

}

Show plain JSON

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:samsung:android:12.0:-:*:*:*:*:*:*", "matchCriteriaId": "D757450C-270E-4FB2-A50C-7F769FED558A", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:12.0:smr-apr-2022-r1:*:*:*:*:*:*", "matchCriteriaId": "EC4A2EBA-038B-44D5-84F3-FF326CD1C62D", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:12.0:smr-aug-2022-r1:*:*:*:*:*:*", "matchCriteriaId": "0ABFBBDB-E935-4C54-865A-0E607497DA87", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:12.0:smr-dec-2021-r1:*:*:*:*:*:*", "matchCriteriaId": "3899E3E7-1284-4223-A258-DA691F5D62FE", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:12.0:smr-dec-2022-r1:*:*:*:*:*:*", "matchCriteriaId": "ECD961EA-6881-4A14-83DE-C6972F6F681C", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:12.0:smr-feb-2022-r1:*:*:*:*:*:*", "matchCriteriaId": "011CC4F5-6701-41E9-BC7D-CFE6EFF682AC", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:12.0:smr-feb-2023-r1:*:*:*:*:*:*", "matchCriteriaId": "13E145E2-CE11-4EE5-9085-B4960FE4F52F", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:12.0:smr-jan-2022-r1:*:*:*:*:*:*", "matchCriteriaId": "A3BBC8B6-1D2B-47C9-93EE-3D3DC43062F1", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:12.0:smr-jul-2022-r1:*:*:*:*:*:*", "matchCriteriaId": "35F40D59-034B-44FB-8DCD-D469B50DE7E1", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:12.0:smr-jun-2022-r1:*:*:*:*:*:*", "matchCriteriaId": "BC3F8572-578B-4D19-9453-1D03DA55EF70", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:12.0:smr-mar-2022-r1:*:*:*:*:*:*", "matchCriteriaId": "9137C66C-4966-4C90-ABE9-7E22F7E29BA7", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:12.0:smr-may-2022-r1:*:*:*:*:*:*", "matchCriteriaId": "18CD523B-530E-4187-8BFF-729CDAC69282", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:12.0:smr-nov-2021-r1:*:*:*:*:*:*", "matchCriteriaId": "5A81C86D-F1FE-4166-8F37-D7170E6B30FE", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:12.0:smr-nov-2022-r1:*:*:*:*:*:*", "matchCriteriaId": "A3D80783-523A-455E-B1AD-0961086F79E6", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:12.0:smr-oct-2022-r1:*:*:*:*:*:*", "matchCriteriaId": "89BE2958-0BEE-4CFD-A0BA-494DE62E7F32", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:12.0:smr-sep-2022-r1:*:*:*:*:*:*", "matchCriteriaId": "B0329C50-B904-480D-8EBB-F2757049FC81", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:13.0:-:*:*:*:*:*:*", "matchCriteriaId": "A123EDB1-3048-44B0-8D4D-39A2B24B5F6B", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:13.0:smr-apr-2023-r1:*:*:*:*:*:*", "matchCriteriaId": "70825981-F895-4BFD-9B6E-92BFF0D67023", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:13.0:smr-dec-2022-r1:*:*:*:*:*:*", "matchCriteriaId": "299284DA-85AB-4162-B858-E67E5C6C14F7", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:13.0:smr-feb-2023-r1:*:*:*:*:*:*", "matchCriteriaId": "D98F307E-3B01-4C17-86E5-1C6299919417", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:13.0:smr-jan-2023-r1:*:*:*:*:*:*", "matchCriteriaId": "7D7DA96D-9C25-4DDA-A6BF-D998AC346B89", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:13.0:smr-mar-2023-r1:*:*:*:*:*:*", "matchCriteriaId": "5F73D594-178F-4FC8-9F40-0E545E2647B0", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:13.0:smr-nov-2022-r1:*:*:*:*:*:*", "matchCriteriaId": "D2B24866-2B3A-4A1A-8B75-EF7A7541797A", "vulnerable": true}, {"criteria": "cpe:2.3:o:samsung:android:13.0:smr-oct-2022-r1:*:*:*:*:*:*", "matchCriteriaId": "EBB29F18-A929-432B-B20C-365401E6CA12", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Improper access control vulnerability in ThemeManager prior to SMR May-2023 Release 1 allows local attackers to write arbitrary files with system privilege."}], "id": "CVE-2023-21491", "lastModified": "2024-11-21T07:42:56.690", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "LOW", "baseScore": 8.5, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:L", "version": "3.1"}, "exploitabilityScore": 2.5, "impactScore": 5.3, "source": "mobile.security@samsung.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2023-05-04T21:15:10.007", "references": [{"source": "mobile.security@samsung.com", "tags": ["Vendor Advisory"], "url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05"}], "sourceIdentifier": "mobile.security@samsung.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-284"}], "source": "mobile.security@samsung.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{

configurations : [ »

0 : { »

nodes : [ »

0 : { »

cpeMatch : [ »

0 : { »

criteria : cpe:2.3:o:samsung:android:12.0:-:*:*:*:*:*:* (string)

matchCriteriaId : D757450C-270E-4FB2-A50C-7F769FED558A (string)

vulnerable : true (boolean)

}

1 : { »

criteria : cpe:2.3:o:samsung:android:12.0:smr-apr-2022-r1:*:*:*:*:*:* (string)

matchCriteriaId : EC4A2EBA-038B-44D5-84F3-FF326CD1C62D (string)

vulnerable : true (boolean)

}

2 : { »

criteria : cpe:2.3:o:samsung:android:12.0:smr-aug-2022-r1:*:*:*:*:*:* (string)

matchCriteriaId : 0ABFBBDB-E935-4C54-865A-0E607497DA87 (string)

vulnerable : true (boolean)

}

3 : { »

criteria : cpe:2.3:o:samsung:android:12.0:smr-dec-2021-r1:*:*:*:*:*:* (string)

matchCriteriaId : 3899E3E7-1284-4223-A258-DA691F5D62FE (string)

vulnerable : true (boolean)

}

4 : { »

criteria : cpe:2.3:o:samsung:android:12.0:smr-dec-2022-r1:*:*:*:*:*:* (string)

matchCriteriaId : ECD961EA-6881-4A14-83DE-C6972F6F681C (string)

vulnerable : true (boolean)

}

5 : { »

criteria : cpe:2.3:o:samsung:android:12.0:smr-feb-2022-r1:*:*:*:*:*:* (string)

matchCriteriaId : 011CC4F5-6701-41E9-BC7D-CFE6EFF682AC (string)

vulnerable : true (boolean)

}

6 : { »

criteria : cpe:2.3:o:samsung:android:12.0:smr-feb-2023-r1:*:*:*:*:*:* (string)

matchCriteriaId : 13E145E2-CE11-4EE5-9085-B4960FE4F52F (string)

vulnerable : true (boolean)

}

7 : { »

criteria : cpe:2.3:o:samsung:android:12.0:smr-jan-2022-r1:*:*:*:*:*:* (string)

matchCriteriaId : A3BBC8B6-1D2B-47C9-93EE-3D3DC43062F1 (string)

vulnerable : true (boolean)

}

8 : { »

criteria : cpe:2.3:o:samsung:android:12.0:smr-jul-2022-r1:*:*:*:*:*:* (string)

matchCriteriaId : 35F40D59-034B-44FB-8DCD-D469B50DE7E1 (string)

vulnerable : true (boolean)

}

9 : { »

criteria : cpe:2.3:o:samsung:android:12.0:smr-jun-2022-r1:*:*:*:*:*:* (string)

matchCriteriaId : BC3F8572-578B-4D19-9453-1D03DA55EF70 (string)

vulnerable : true (boolean)

}

10 : { »

criteria : cpe:2.3:o:samsung:android:12.0:smr-mar-2022-r1:*:*:*:*:*:* (string)

matchCriteriaId : 9137C66C-4966-4C90-ABE9-7E22F7E29BA7 (string)

vulnerable : true (boolean)

}

11 : { »

criteria : cpe:2.3:o:samsung:android:12.0:smr-may-2022-r1:*:*:*:*:*:* (string)

matchCriteriaId : 18CD523B-530E-4187-8BFF-729CDAC69282 (string)

vulnerable : true (boolean)

}

12 : { »

criteria : cpe:2.3:o:samsung:android:12.0:smr-nov-2021-r1:*:*:*:*:*:* (string)

matchCriteriaId : 5A81C86D-F1FE-4166-8F37-D7170E6B30FE (string)

vulnerable : true (boolean)

}

13 : { »

criteria : cpe:2.3:o:samsung:android:12.0:smr-nov-2022-r1:*:*:*:*:*:* (string)

matchCriteriaId : A3D80783-523A-455E-B1AD-0961086F79E6 (string)

vulnerable : true (boolean)

}

14 : { »

criteria : cpe:2.3:o:samsung:android:12.0:smr-oct-2022-r1:*:*:*:*:*:* (string)

matchCriteriaId : 89BE2958-0BEE-4CFD-A0BA-494DE62E7F32 (string)

vulnerable : true (boolean)

}

15 : { »

criteria : cpe:2.3:o:samsung:android:12.0:smr-sep-2022-r1:*:*:*:*:*:* (string)

matchCriteriaId : B0329C50-B904-480D-8EBB-F2757049FC81 (string)

vulnerable : true (boolean)

}

16 : { »

criteria : cpe:2.3:o:samsung:android:13.0:-:*:*:*:*:*:* (string)

matchCriteriaId : A123EDB1-3048-44B0-8D4D-39A2B24B5F6B (string)

vulnerable : true (boolean)

}

17 : { »

criteria : cpe:2.3:o:samsung:android:13.0:smr-apr-2023-r1:*:*:*:*:*:* (string)

matchCriteriaId : 70825981-F895-4BFD-9B6E-92BFF0D67023 (string)

vulnerable : true (boolean)

}

18 : { »

criteria : cpe:2.3:o:samsung:android:13.0:smr-dec-2022-r1:*:*:*:*:*:* (string)

matchCriteriaId : 299284DA-85AB-4162-B858-E67E5C6C14F7 (string)

vulnerable : true (boolean)

}

19 : { »

criteria : cpe:2.3:o:samsung:android:13.0:smr-feb-2023-r1:*:*:*:*:*:* (string)

matchCriteriaId : D98F307E-3B01-4C17-86E5-1C6299919417 (string)

vulnerable : true (boolean)

}

20 : { »

criteria : cpe:2.3:o:samsung:android:13.0:smr-jan-2023-r1:*:*:*:*:*:* (string)

matchCriteriaId : 7D7DA96D-9C25-4DDA-A6BF-D998AC346B89 (string)

vulnerable : true (boolean)

}

21 : { »

criteria : cpe:2.3:o:samsung:android:13.0:smr-mar-2023-r1:*:*:*:*:*:* (string)

matchCriteriaId : 5F73D594-178F-4FC8-9F40-0E545E2647B0 (string)

vulnerable : true (boolean)

}

22 : { »

criteria : cpe:2.3:o:samsung:android:13.0:smr-nov-2022-r1:*:*:*:*:*:* (string)

matchCriteriaId : D2B24866-2B3A-4A1A-8B75-EF7A7541797A (string)

vulnerable : true (boolean)

}

23 : { »

criteria : cpe:2.3:o:samsung:android:13.0:smr-oct-2022-r1:*:*:*:*:*:* (string)

matchCriteriaId : EBB29F18-A929-432B-B20C-365401E6CA12 (string)

vulnerable : true (boolean)

}

]

negate : false (boolean)

operator : OR (string)

}

]

}

]

descriptions : [ »

0 : { »

lang : en (string)

value : Improper access control vulnerability in ThemeManager prior to SMR May-2023 Release 1 allows local attackers to write arbitrary files with system privilege. (string)

}

]

id : CVE-2023-21491 (string)

lastModified : 2024-11-21T07:42:56.690 (string)

metrics : { »

cvssMetricV31 : [ »

0 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : LOW (string)

baseScore : 8.5 (number)

baseSeverity : HIGH (string)

confidentialityImpact : LOW (string)

integrityImpact : HIGH (string)

privilegesRequired : NONE (string)

scope : CHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:L (string)

version : 3.1 (string)

}

exploitabilityScore : 2.5 (number)

impactScore : 5.3 (number)

source : mobile.security@samsung.com (string)

type : Secondary (string)

}

1 : { »

cvssData : { »

attackComplexity : LOW (string)

attackVector : LOCAL (string)

availabilityImpact : HIGH (string)

baseScore : 7.8 (number)

baseSeverity : HIGH (string)

confidentialityImpact : HIGH (string)

integrityImpact : HIGH (string)

privilegesRequired : LOW (string)

scope : UNCHANGED (string)

userInteraction : NONE (string)

vectorString : CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (string)

version : 3.1 (string)

}

exploitabilityScore : 1.8 (number)

impactScore : 5.9 (number)

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

published : 2023-05-04T21:15:10.007 (string)

references : [ »

0 : { »

source : mobile.security@samsung.com (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05 (string)

}

1 : { »

source : af854a3a-2127-422b-91ae-364da2661108 (string)

tags : [ »

0 : Vendor Advisory (string)

]

url : https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=05 (string)

}

]

sourceIdentifier : mobile.security@samsung.com (string)

vulnStatus : Modified (string)

weaknesses : [ »

0 : { »

description : [ »

0 : { »

lang : en (string)

value : CWE-284 (string)

}

]

source : mobile.security@samsung.com (string)

type : Secondary (string)

}

1 : { »

description : [ »

0 : { »

lang : en (string)

value : NVD-CWE-noinfo (string)

}

]

source : nvd@nist.gov (string)

type : Primary (string)

}

]

}

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact Low

Integrity Impact High

Availability Impact Low

User Interaction None

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

Metrics

Attack Vector Local

Attack Complexity Low

Privileges Required None

Scope Changed

Confidentiality Impact Low

Integrity Impact High

Availability Impact Low

User Interaction None

Exploitation none

Automatable no

Technical Impact total

Affected Vendors & Products

JSON object

JSON object

JSON object

JSON object