CVE-2023-30702 | Severity.io

Description

Stack overflow vulnerability in SSHDCPAPP TA prior to "SAMSUNG ELECTONICS, CO, LTD. - System Hardware Update - 7/13/2023" in Windows Update for Galaxy book Go, Galaxy book Go 5G, Galaxy book2 Go and Galaxy book2 Pro 360 allows local attacker to execute arbitrary code.

Related CPE's

galaxy_book_go_firmware

Vulnerable

galaxy_book_go_5g_firmware

Vulnerable

galaxy_book_go_5g

galaxy_book2_go_firmware

Vulnerable

galaxy_book2_go

galaxy_book2_pro_360_firmware

Vulnerable

galaxy_book2_pro_360

References

https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=08

Vendor Advisory

https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=08

Vendor Advisory

Weaknesses

[email protected]

Primary

CWE-787

CVSS impact metrics

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

6.7 · Medium

Information

Source identifier

[email protected]

Vulnerability status

Modified

Published

2023-08-10T00:15:12.547Z

2 years ago

Last modified

2024-11-21T07:00:43.403Z

1 year ago