Vulnerability record/PUBLISHED/Published Jul 6, 2023 02:51:37 UTC

CVE-2023-30664

Improper input validation vulnerability in RegisteredMSISDN prior to SMR Jul-2023 Release 1 allows local attackers to launch privileged activities.

Base score8.5/ 10

SeverityHighCVSS 3.1

Exploitability / impact

CVSS metric breakdown

Vector-derived attributes

Base severityHigh

Attack vectorLocalAV

Attack complexityLowAC

Privileges requiredNonePR

User interactionNoneUI

ScopeChangedS

Confidentiality impactHighC

Integrity impactLowI

Availability impactLowA

CVSS vector stringCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L

CVSS communicates standardized severity and impact characteristics. It does not establish whether a system is exploitable in your specific environment.

Record context

CVE Numbering AuthoritySamsung Mobile

Last updatedOct 31, 2024 17:55:41 UTC

PublishedJul 6, 2023 02:51:37 UTC

ReservedApr 14, 2023 01:59:51 UTC