{"id":"CVE-2023-42545","state":"PUBLISHED","title":"Use of implicit intent for sensitive communication vulnerability in Phone prior to versions 12.7.20.12 in Android 11, 13.1.48, 13.5.28 in Android 12, and 14.7.38 in Android 13 allo","description":"Use of implicit intent for sensitive communication vulnerability in Phone prior to versions 12.7.20.12 in Android 11, 13.1.48, 13.5.28 in Android 12, and 14.7.38 in Android 13 allows attackers to access location data.","publishedAt":"2023-11-07T07:49:43.966Z","updatedAt":"2024-09-17T13:32:33.996Z","severity":{"score":5.5,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N","source":"Samsung Mobile"},"assigner":"Samsung Mobile","products":["Samsung Mobile Phone"],"affected":[{"vendor":"Samsung Mobile","product":"Phone","defaultStatus":"affected","versions":[{"version":"12.7.20.12 in Android 11, 13.1.48, 13.5.28 in Android 12, and 14.7.38 in Android 13","status":"unaffected"}]}],"references":["https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=11"],"weaknesses":[],"ingestedAt":"2026-10-29T20:06:17.512Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/42xxx/CVE-2023-42545.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-42545","state":"PUBLISHED","datePublished":"2023-11-07T07:49:43.966Z","dateUpdated":"2024-09-17T13:32:33.996Z","assignerShortName":"Samsung Mobile","assignerOrgId":"3af57064-a867-422c-b2ad-40307b65c458","dateReserved":"2023-09-11T23:55:08.350Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Use of implicit intent for sensitive communication vulnerability in Phone prior to versions 12.7.20.12 in Android 11, 13.1.48, 13.5.28 in Android 12, and 14.7.38 in Android 13 allows attackers to access location data."}],"affected":[{"vendor":"Samsung Mobile","product":"Phone","defaultStatus":"affected","versions":[{"version":"12.7.20.12 in Android 11, 13.1.48, 13.5.28 in Android 12, and 14.7.38 in Android 13","status":"unaffected"}]}],"references":[{"url":"https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=11"}],"metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","attackVector":"LOCAL","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE","baseSeverity":"MEDIUM","baseScore":5.5,"vectorString":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N"}}],"problemTypes":[{"descriptions":[{"lang":"en","description":"CWE-927 : Use of Implicit Intent for Sensitive Communication"}]}],"providerMetadata":{"shortName":"Samsung Mobile","orgId":"3af57064-a867-422c-b2ad-40307b65c458","dateUpdated":"2023-11-07T07:49:43.966Z"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=11","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T19:23:39.655Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-09-04T18:03:16.464601Z","id":"CVE-2023-42545","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-09-17T13:32:33.996Z"}}]}}}