Vulnerabilidades

A reflected cross site scripting (XSS) vulnerability was discovered on Samsung sww-3400rw Router devices via the m2 parameter of the sess-bin/command.cgi

Certain HP and Samsung Printer software packages may potentially be vulnerable to elevation of privilege due to Uncontrolled Search Path Element.

Harman Infotainment 20190525031613 and later allows command injection via unauthenticated RPC with a D-Bus connection object.

Harman Infotainment 20190525031613 and later discloses the IP address via CarPlay CTRL packets.

Harman Infotainment 20190525031613 allows root access via SSH over a USB-to-Ethernet dongle with a password that is an internal project name.

Improper sanitization of incoming intent in Galaxy Store prior to version 4.5.56.6?allows local attackers to access privileged content providers as Galaxy Store permission.

Improper Authorization vulnerability in Samsung Internet prior to version 22.0.0.35 allows physical attacker access downloaded files in Secret Mode without user authentication.

Improper URL validation vulnerability in Samsung Members prior to version 14.0.07.1 allows attackers to access sensitive information.

Stack overflow vulnerability in SSHDCPAPP TA prior to "SAMSUNG ELECTONICS, CO, LTD. - System Hardware Update - 7/13/2023" in Windows Update for Galaxy book Go, Galaxy book Go 5G, Galaxy book2 Go and Galaxy book2 Pro 360 allows local attacker to execute arbitrary code.

PendingIntent hijacking in WifiGeofenceManager prior to SMR Aug-2023 Release 1 allows local attacker to arbitrary file access.

PendingIntent hijacking vulnerability in SemWifiApTimeOutImpl in framework prior to SMR Aug-2023 Release 1 allows local attackers to access ContentProvider without proper permission.

Out-of-bounds write vulnerability in parser_hvcC function of libsimba library prior to SMR Aug-2023 Release 1 allows code execution by remote attackers.

Improper access control vulnerability in TelephonyUI prior to SMR Aug-2023 Release 1 allows local attacker to connect BLE without privilege.

An improper input validation in IpcTxCfgSetSimlockPayload in libsec-ril prior to SMR Aug-2023 Release 1 allows attacker to cause out-of-bounds write.

Una validación de entrada incorrecta en la función IpcTxGetVerifyAkey en libsec-ril anterior a SMR Aug-2023 Release 1 permite a un atacante provocar una escritura fuera de los límites.

Una vulnerabilidad de escritura fuera de límites en SSHDCPAPP TA antes de "SAMSUNG ELECTONICS, CO, LTD. - System Hardware Update - 7/13/2023" en Windows Update para Galaxy book Go, Galaxy book Go 5G, Galaxy book2 Go y Galaxy book2 Pro 360 permite a un atacante local ejecutar código arbitrario.

Una escritura fuera de límites en IpcTxPcscTransmitApdu de libsec-ril anterior a SMR Aug-2023 Release 1 permite a un atacante local ejecutar código arbitrario.

Una escritura fuera de los limites en la función "DoOemFactorySendFactoryBypassCommand" del componente libsec-ril anterior a SMR Aug-2023 Release 1 permite a un atacante local ejecutar código arbitrario.

Desajuste en AuthenticationConfig anterior a SMR Aug-2023 Release 1 permite a un atacante local la escalada de privilegios.

Escritura fuera de límites en BuildOemEmbmsGetSigStrengthResponse de libsec-ril antes de SMR Aug-2023 Release 1 permite a un atacante local ejecutar código arbitrario.

Escritura fuera de los límites en MakeUiccAuthForOem de libsec-ril anterior a SMR Aug-2023 Release 1 que permite a un atacante local ejecutar código arbitrario.

Escritura fuera de límites en RmtUimApdu de libsec-ril anterior a SMR Aug-2023 Release 1 que permite a un atacante local ejecutar código arbitrario.

Escritura fuera de límites en ReqDataRaw de libsec-ri anterior a SMR Aug-2023 Release 1 que permite a un atacante local ejecutar código arbitrario.

La vulnerabilidad de control de acceso inadecuado en Telecom anterior a SMR Aug-2023 Release 1 permite a los atacantes locales cambiar el modo TTY.

Control de acceso inadecuado en Samsung Telecom antes de SMR Aug-2023 Release 1 que permite a los atacantes locales llamar a la API acceptRingingCall sin permiso.