CVE-2023-42532

Published Nov 7, 2023 CVSS 3.1 · 5.9 Medium EPSS < 1% KEV · Not listed
Description
Improper Certificate Validation in FotaAgent prior to SMR Nov-2023 Release1 allows remote attacker to intercept the network traffic including Firmware information.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2023-46965 Improper Certificate Validation in FotaAgent prior to SMR Nov-2023 Release1 allows remote attacker to intercept the network traffic including Firmware information.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
Samsung Mobile
Published
Updated
Sep 4, 2024, 6:52 PM
Reserved
Sep 11, 2023, 11:55 PM
Status
Modified
Published
Nov 7, 2023, 8:15 AM
Modified
Jun 17, 2026, 6:24 AM