Improper access control vulnerability in SecSettings prior to SMR Oct-2023 Release 1 allows attackers to enable Wi-Fi and connect arbitrary Wi-Fi without User Interaction.
Attack Vector Network
Attack Complexity Low
Privileges Required None
Scope Unchanged
Confidentiality Impact None
Integrity Impact High
Availability Impact None
User Interaction None
No CVSS v3.0
No CVSS v2
Vendors | Products |
---|---|
Samsung |
|
Configuration 1 [-]
|
References
Link | Resource |
---|---|
https://security.samsungmobile.com/securityUpdate.smsb?year=2023&month=10 | Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: Samsung Mobile
Published: 2023-10-04T03:02:43.232Z
Updated: 2023-10-04T03:02:43.232Z
Reserved: 2023-04-14T01:59:51.138Z
Link: CVE-2023-30727
JSON object: View
NVD Information
Status : Modified
Published: 2023-10-04T04:15:12.687
Modified: 2023-11-07T04:14:02.413
Link: CVE-2023-30727
JSON object: View
Redhat Information
No data.
CWE