Vulnerability · Published Mar 16, 2023 · Assigned by Samsung Mobile
CVE-2023-21463
Medium 4.0
In plain English
A medium-severity improper access control in MyFiles from Samsung Mobile. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.1% (higher than 4% of all known vulnerabilities).
Severity (CVSS 3.1)4.0Medium
Exploit odds (30 days)0.1%top 95.9% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Improper access control vulnerability in MyFiles application prior to versions 12.2.09.0 in Android 11, 13.1.03.501 in Android 12 and 14.1.03.0 in Android 13 allows local attacker to get sensitive information of secret mode in Samsung Internet application with specific conditions.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Samsung Mobile | MyFiles | unspecified – before 12.2.09.0 in Android 11, 13.1.03.501 in Android12 and 14.1.03.0 in Android 13 |
Weakness: CWE-284 · Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N