CVE-2023-42551

MEDIUM

Samsung Account < 14.5.00.7 - Exposure to Wrong Actor

Title source: rule

Description

Use of implicit intent for sensitive communication vulnerability in startTncActivity in Samsung Account prior to version 14.5.00.7 allows attackers to access arbitrary file with Samsung Account privilege.

References (1)

[Vendor Advisory] https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=11

Scores

CVSS v3 5.5

EPSS 0.0017

EPSS Percentile 37.8%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Classification

CWE

CWE-668

Status published

Affected Products (1)

samsung/account < 14.5.00.7

Timeline

Published Nov 07, 2023

Tracked Since Feb 18, 2026