CVE Vulnerabilities

CVE-2023-21513

Improper Privilege Management

Published: Jun 28, 2023 | Modified: Dec 05, 2024
CVSS 3.x
6.8
MEDIUM
Source:
NVD
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
Ubuntu

Improper privilege management vulnerability in CC Mode prior to SMR Jun-2023 Release 1 allows physical attackers to manipulate device to operate in way that results in unexpected behavior in CC Mode under specific condition.

Weakness

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

Affected Software

Name Vendor Start Version End Version
Android Samsung 11.0-smr-apr-2021-r1 (including) 11.0-smr-apr-2021-r1 (including)
Android Samsung 11.0-smr-apr-2022-r1 (including) 11.0-smr-apr-2022-r1 (including)
Android Samsung 11.0-smr-apr-2023-r1 (including) 11.0-smr-apr-2023-r1 (including)
Android Samsung 11.0-smr-aug-2021-r1 (including) 11.0-smr-aug-2021-r1 (including)
Android Samsung 11.0-smr-aug-2022-r1 (including) 11.0-smr-aug-2022-r1 (including)
Android Samsung 11.0-smr-dec-2020-r1 (including) 11.0-smr-dec-2020-r1 (including)
Android Samsung 11.0-smr-dec-2021-r1 (including) 11.0-smr-dec-2021-r1 (including)
Android Samsung 11.0-smr-dec-2022-r1 (including) 11.0-smr-dec-2022-r1 (including)
Android Samsung 11.0-smr-feb-2021-r1 (including) 11.0-smr-feb-2021-r1 (including)
Android Samsung 11.0-smr-feb-2022-r1 (including) 11.0-smr-feb-2022-r1 (including)
Android Samsung 11.0-smr-feb-2023-r1 (including) 11.0-smr-feb-2023-r1 (including)
Android Samsung 11.0-smr-jan-2021-r1 (including) 11.0-smr-jan-2021-r1 (including)
Android Samsung 11.0-smr-jan-2022-r1 (including) 11.0-smr-jan-2022-r1 (including)
Android Samsung 11.0-smr-jan-2023-r1 (including) 11.0-smr-jan-2023-r1 (including)
Android Samsung 11.0-smr-jul-2021-r1 (including) 11.0-smr-jul-2021-r1 (including)
Android Samsung 11.0-smr-jul-2022-r1 (including) 11.0-smr-jul-2022-r1 (including)
Android Samsung 11.0-smr-jun-2021-r1 (including) 11.0-smr-jun-2021-r1 (including)
Android Samsung 11.0-smr-jun-2022-r1 (including) 11.0-smr-jun-2022-r1 (including)
Android Samsung 11.0-smr-mar-2021-r1 (including) 11.0-smr-mar-2021-r1 (including)
Android Samsung 11.0-smr-mar-2022-r1 (including) 11.0-smr-mar-2022-r1 (including)
Android Samsung 11.0-smr-mar-2023-r1 (including) 11.0-smr-mar-2023-r1 (including)
Android Samsung 11.0-smr-may-2021-r1 (including) 11.0-smr-may-2021-r1 (including)
Android Samsung 11.0-smr-may-2022-r1 (including) 11.0-smr-may-2022-r1 (including)
Android Samsung 11.0-smr-may-2023-r1 (including) 11.0-smr-may-2023-r1 (including)
Android Samsung 11.0-smr-nov-2021-r1 (including) 11.0-smr-nov-2021-r1 (including)
Android Samsung 11.0-smr-nov-2022-r1 (including) 11.0-smr-nov-2022-r1 (including)
Android Samsung 11.0-smr-oct-2021-r1 (including) 11.0-smr-oct-2021-r1 (including)
Android Samsung 11.0-smr-oct-2022-r1 (including) 11.0-smr-oct-2022-r1 (including)
Android Samsung 11.0-smr-sep-2021-r1 (including) 11.0-smr-sep-2021-r1 (including)
Android Samsung 11.0-smr-sep-2022-r1 (including) 11.0-smr-sep-2022-r1 (including)
Android Samsung 12.0-smr-apr-2022-r1 (including) 12.0-smr-apr-2022-r1 (including)
Android Samsung 12.0-smr-apr-2023-r1 (including) 12.0-smr-apr-2023-r1 (including)
Android Samsung 12.0-smr-aug-2022-r1 (including) 12.0-smr-aug-2022-r1 (including)
Android Samsung 12.0-smr-dec-2021-r1 (including) 12.0-smr-dec-2021-r1 (including)
Android Samsung 12.0-smr-dec-2022-r1 (including) 12.0-smr-dec-2022-r1 (including)
Android Samsung 12.0-smr-feb-2022-r1 (including) 12.0-smr-feb-2022-r1 (including)
Android Samsung 12.0-smr-feb-2023-r1 (including) 12.0-smr-feb-2023-r1 (including)
Android Samsung 12.0-smr-jan-2022-r1 (including) 12.0-smr-jan-2022-r1 (including)
Android Samsung 12.0-smr-jan-2023-r1 (including) 12.0-smr-jan-2023-r1 (including)
Android Samsung 12.0-smr-jul-2022-r1 (including) 12.0-smr-jul-2022-r1 (including)
Android Samsung 12.0-smr-jun-2022-r1 (including) 12.0-smr-jun-2022-r1 (including)
Android Samsung 12.0-smr-mar-2022-r1 (including) 12.0-smr-mar-2022-r1 (including)
Android Samsung 12.0-smr-mar-2023-r1 (including) 12.0-smr-mar-2023-r1 (including)
Android Samsung 12.0-smr-may-2022-r1 (including) 12.0-smr-may-2022-r1 (including)
Android Samsung 12.0-smr-may-2023-r1 (including) 12.0-smr-may-2023-r1 (including)
Android Samsung 12.0-smr-nov-2021-r1 (including) 12.0-smr-nov-2021-r1 (including)
Android Samsung 12.0-smr-nov-2022-r1 (including) 12.0-smr-nov-2022-r1 (including)
Android Samsung 12.0-smr-oct-2022-r1 (including) 12.0-smr-oct-2022-r1 (including)
Android Samsung 12.0-smr-sep-2022-r1 (including) 12.0-smr-sep-2022-r1 (including)
Android Samsung 13.0-smr-apr-2023-r1 (including) 13.0-smr-apr-2023-r1 (including)
Android Samsung 13.0-smr-dec-2022-r1 (including) 13.0-smr-dec-2022-r1 (including)
Android Samsung 13.0-smr-feb-2023-r1 (including) 13.0-smr-feb-2023-r1 (including)
Android Samsung 13.0-smr-jan-2023-r1 (including) 13.0-smr-jan-2023-r1 (including)
Android Samsung 13.0-smr-mar-2023-r1 (including) 13.0-smr-mar-2023-r1 (including)
Android Samsung 13.0-smr-may-2023-r1 (including) 13.0-smr-may-2023-r1 (including)
Android Samsung 13.0-smr-nov-2022-r1 (including) 13.0-smr-nov-2022-r1 (including)
Android Samsung 13.0-smr-oct-2022-r1 (including) 13.0-smr-oct-2022-r1 (including)

Potential Mitigations

References