« Volver al listado

CVE-2023-30702

Estado: ModificadaAlta (7.8)—

Stack overflow vulnerability in SSHDCPAPP TA prior to "SAMSUNG ELECTONICS, CO, LTD. - System Hardware Update - 7/13/2023" in Windows Update for Galaxy book Go, Galaxy book Go 5G, Galaxy book2 Go and Galaxy book2 Pro 360 allows local attacker to execute arbitrary code.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (4)

Samsung — Galaxy Book2 GO FirmwareSamsung — Galaxy Book2 PRO 360 FirmwareSamsung — Galaxy Book GO 5G FirmwareSamsung — Galaxy Book GO Firmware

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2023-30702",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2023-30702",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-10-10T15:44:46.458860Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "mobile.security@samsung.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.7,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 0.8
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.8,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "mobile.security@samsung.com",
      "affectedData": [
        {
          "vendor": "Samsung Mobile",
          "product": "Galaxy book Go, Galaxy book Go 5G, Galaxy book2 Go and Galaxy book2 Pro 360",
          "versions": [
            {
              "status": "unaffected",
              "version": ""SAMSUNG ELECTONICS, CO, LTD. - System Hardware Update - 7/13/2023""
            }
          ],
          "defaultStatus": "affected"
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:h:samsung_mobile:galaxy_book_go:*:*:*:*:*:*:*:*"
          ],
          "vendor": "samsung_mobile",
          "product": "galaxy_book_go",
          "versions": [
            {
              "status": "affected",
              "version": "\\&/quot_SAMSUNG_ELECTONICS_CO_LTD_System_Hardware_Update_13/2023\\/&quot"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:h:samsung_mobile:galaxy_book_go_5g:*:*:*:*:*:*:*:*"
          ],
          "vendor": "samsung_mobile",
          "product": "galaxy_book_go_5g",
          "versions": [
            {
              "status": "affected",
              "version": "\\&/quot_SAMSUNG_ELECTONICS_CO_LTD_System_Hardware_Update_13/2023\\/&quot"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:h:samsung_mobile:galaxy_book_2_go:*:*:*:*:*:*:*:*"
          ],
          "vendor": "samsung_mobile",
          "product": "galaxy_book_2_go",
          "versions": [
            {
              "status": "affected",
              "version": "\\&/quot_SAMSUNG_ELECTONICS_CO_LTD_System_Hardware_Update_13/2023\\/&quot"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:h:samsung_mobile:galaxy_book_2_pro_360:*:*:*:*:*:*:*:*"
          ],
          "vendor": "samsung_mobile",
          "product": "galaxy_book_2_pro_360",
          "versions": [
            {
              "status": "affected",
              "version": "\\&/quot_SAMSUNG_ELECTONICS_CO_LTD_System_Hardware_Update_13/2023\\/&quot"
            }
          ],
          "defaultStatus": "unknown"
        }
      ]
    }
  ],
  "published": "2023-08-10T02:15:12.547",
  "references": [
    {
      "url": "https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=08",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "mobile.security@samsung.com"
    },
    {
      "url": "https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=08",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-787"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Stack overflow vulnerability in SSHDCPAPP TA prior to "SAMSUNG ELECTONICS, CO, LTD. - System Hardware Update - 7/13/2023" in Windows Update for Galaxy book Go, Galaxy book Go 5G, Galaxy book2 Go and Galaxy book2 Pro 360 allows local attacker to execute arbitrary code."
    }
  ],
  "lastModified": "2026-06-17T05:55:26.727",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:samsung:galaxy_book_go_firmware:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8CC4214A-9D1C-4A36-8B5F-15EE9F98AB05"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:samsung:galaxy_book_go:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "67BB8AB9-8622-48D4-AE16-464E9BE01429"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:samsung:galaxy_book_go_5g_firmware:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1ACC9B93-5B14-467E-B16A-E2378DB7338C"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:samsung:galaxy_book_go_5g:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "79F245FC-9B18-460B-A86C-2016FE0C32B4"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:samsung:galaxy_book2_go_firmware:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7D75771B-4BFA-478E-9703-03036C544A4F"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:samsung:galaxy_book2_go:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "F62C48C2-E69C-46FE-84DB-13BC1B519F9A"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:samsung:galaxy_book2_pro_360_firmware:-:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4D936433-A4EB-44A0-B230-8001BE75BE45"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:samsung:galaxy_book2_pro_360:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "A5CC5E85-7209-4E0D-B96A-11C77513CE8A"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "mobile.security@samsung.com"
}