CVE-2023-42531

Published Nov 7, 2023 CVSS 3.1 · 6.2 Medium EPSS < 1% KEV · Not listed
Description
Improper access control vulnerability in SmsController prior to SMR Nov-2023 Release1 allows local attackers to bypass restrictions on starting activities from the background.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2023-46964 Improper access control vulnerability in SmsController prior to SMR Nov-2023 Release1 allows local attackers to bypass restrictions on starting activities from the background.
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
Samsung Mobile
Published
Updated
Jun 12, 2025, 2:15 PM
Reserved
Sep 11, 2023, 11:55 PM
Status
Modified
Published
Nov 7, 2023, 8:15 AM
Modified
Jun 17, 2026, 6:24 AM