CVE-2023-30730 - OpenCVE

Implicit intent hijacking vulnerability in Camera prior to versions 11.0.16.43 in Android 11, 12.1.00.30, 12.0.07.53, 12.1.03.10 in Android 12, and 13.0.01.43, 13.1.00.83 in Android 13 allows local attacker to access specific file.

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact None

Availability Impact None

User Interaction None

No CVSS v3.0

No CVSS v2

Vendors & Products
CPE Configurations

Vendors	Products
Samsung	Camera
Google	Android

Configuration 1 [-]

AND

cpe:2.3:a:samsung:camera:*:*:*:*:*:*:*:*

cpe:2.3:o:google:android:11.0:-:*:*:*:*:*:*

Configuration 2 [-]

AND

OR	cpe:2.3:a:samsung:camera::::::::
	cpe:2.3:a:samsung:camera::::::::
	cpe:2.3:a:samsung:camera::::::::

cpe:2.3:o:google:android:12.0:-:*:*:*:*:*:*

Configuration 3 [-]

AND

OR	cpe:2.3:a:samsung:camera::::::::
	cpe:2.3:a:samsung:camera::::::::

cpe:2.3:o:google:android:13.0:-:*:*:*:*:*:*

References

Link	Resource
https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=09	Vendor Advisory

History

No history.

MITRE Information

Status: PUBLISHED

Assigner: Samsung Mobile

Published: 2023-09-06T03:12:16.839Z

Updated: 2023-09-06T03:12:16.839Z

Reserved: 2023-04-14T01:59:51.138Z

Link: CVE-2023-30730

JSON object: View

NVD Information

Status : Modified

Published: 2023-09-06T04:15:17.130

Modified: 2023-11-07T04:14:02.930

Link: CVE-2023-30730

JSON object: View

Redhat Information

No data.

CWE

NVD-CWE-noinfo

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:samsung:camera:*:*:*:*:*:*:*:*", "matchCriteriaId": "227E57F4-C888-4AA6-8865-5CE83D32C87A", "versionEndExcluding": "11.0.16.43", "versionStartIncluding": "11.0.00.00", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:o:google:android:11.0:-:*:*:*:*:*:*", "matchCriteriaId": "F120D280-287A-474F-9DC5-CBBC4B4C7237", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:samsung:camera:*:*:*:*:*:*:*:*", "matchCriteriaId": "638D6350-E394-4402-818C-95D38B7602D7", "versionEndExcluding": "12.0.07.53", "versionStartIncluding": "12.0.00.00", "vulnerable": true}, {"criteria": "cpe:2.3:a:samsung:camera:*:*:*:*:*:*:*:*", "matchCriteriaId": "53B10221-F53C-4A7F-8B35-719091432AD8", "versionEndExcluding": "12.1.00.30", "versionStartIncluding": "12.1.00.00", "vulnerable": true}, {"criteria": "cpe:2.3:a:samsung:camera:*:*:*:*:*:*:*:*", "matchCriteriaId": "67E18AC6-91F5-4AB5-A8E2-790126F8E420", "versionEndExcluding": "12.1.03.10", "versionStartIncluding": "12.1.03.00", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:o:google:android:12.0:-:*:*:*:*:*:*", "matchCriteriaId": "16820CAF-0A8A-45C8-B5A8-979EA0407389", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}, {"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:samsung:camera:*:*:*:*:*:*:*:*", "matchCriteriaId": "D58B02D8-9EF9-4FF1-B89C-6978B15C8DDC", "versionEndExcluding": "13.0.01.43", "vulnerable": true}, {"criteria": "cpe:2.3:a:samsung:camera:*:*:*:*:*:*:*:*", "matchCriteriaId": "22EAE84E-1584-4FA4-B0B0-917A87469AEB", "versionEndExcluding": "13.1.00.83", "versionStartIncluding": "13.1.00.00", "vulnerable": true}], "negate": false, "operator": "OR"}, {"cpeMatch": [{"criteria": "cpe:2.3:o:google:android:13.0:-:*:*:*:*:*:*", "matchCriteriaId": "08A26AC2-409E-499A-B0D5-8C2B5038947D", "vulnerable": false}], "negate": false, "operator": "OR"}], "operator": "AND"}], "descriptions": [{"lang": "en", "value": "Implicit intent hijacking vulnerability in Camera prior to versions 11.0.16.43 in Android 11, 12.1.00.30, 12.0.07.53, 12.1.03.10 in Android 12, and 13.0.01.43, 13.1.00.83 in Android 13 allows local attacker to access specific file."}, {"lang": "es", "value": "Una vulnerabilidad de secuestro de intenci\u00f3n impl\u00edcita en la aplicaci\u00f3n Camera anterior a las versiones 11.0.16.43 en Android 11,12.1.00.30, 12.0.07.53, 12.1.03.10 en Android 12, y 13.0.01.43, 13.1.00.83 en Android 13 permite a un atacante local acceder a un archivo espec\u00edfico."}], "id": "CVE-2023-30730", "lastModified": "2023-11-07T04:14:02.930", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "NONE", "baseScore": 3.3, "baseSeverity": "LOW", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 1.4, "source": "mobile.security@samsung.com", "type": "Secondary"}]}, "published": "2023-09-06T04:15:17.130", "references": [{"source": "mobile.security@samsung.com", "tags": ["Vendor Advisory"], "url": "https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=09"}], "sourceIdentifier": "mobile.security@samsung.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-noinfo"}], "source": "nvd@nist.gov", "type": "Primary"}]}