{"id":"CVE-2023-21462","state":"PUBLISHED","title":"The sensitive information exposure vulnerability in Quick Share Agent prior to versions 3.5.14.18 in Android 12 and 3.5.16.20 in Android 13 allows to local attacker to access MAC a","description":"The sensitive information exposure vulnerability in Quick Share Agent prior to versions 3.5.14.18 in Android 12 and 3.5.16.20 in Android 13 allows to local attacker to access MAC address without related permission.","publishedAt":"2023-03-16T00:00:00.000Z","updatedAt":"2024-08-02T09:36:34.479Z","severity":{"score":4.2,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N","source":"Samsung Mobile"},"assigner":"Samsung Mobile","products":["Samsung Mobile Quick Share Agent"],"affected":[{"vendor":"Samsung Mobile","product":"Quick Share Agent","versions":[{"version":"unspecified","status":"affected","lessThan":"3.5.14.18 in Android 12 and 3.5.16.20 in Android 13","versionType":"custom"}]}],"references":["https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=03"],"weaknesses":["CWE-215"],"ingestedAt":"2026-10-29T20:05:36.141Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/21xxx/CVE-2023-21462.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-21462","state":"PUBLISHED","datePublished":"2023-03-16T00:00:00.000Z","dateUpdated":"2024-08-02T09:36:34.479Z","assignerShortName":"Samsung Mobile","assignerOrgId":"3af57064-a867-422c-b2ad-40307b65c458","dateReserved":"2022-11-14T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"The sensitive information exposure vulnerability in Quick Share Agent prior to versions 3.5.14.18 in Android 12 and 3.5.16.20 in Android 13 allows to local attacker to access MAC address without related permission."}],"affected":[{"vendor":"Samsung Mobile","product":"Quick Share Agent","versions":[{"version":"unspecified","status":"affected","lessThan":"3.5.14.18 in Android 12 and 3.5.16.20 in Android 13","versionType":"custom"}]}],"references":[{"url":"https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=03"}],"metrics":[{"cvssV3_1":{"version":"3.1","vectorString":"CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"HIGH","userInteraction":"REQUIRED","scope":"CHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE","baseScore":4.2,"baseSeverity":"MEDIUM"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-215","type":"CWE","lang":"en","description":"CWE-215: Insertion of Sensitive Information Into Debugging Code"}]}],"providerMetadata":{"shortName":"Samsung Mobile","orgId":"3af57064-a867-422c-b2ad-40307b65c458","dateUpdated":"2023-03-16T00:00:00.000Z"},"source":{"discovery":"UNKNOWN"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=03","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T09:36:34.479Z"}}]}}}