CVE-2023-30738
Estado: ModificadaAlta (7.8)—
An improper input validation in UEFI Firmware prior to Firmware update Oct-2023 Release in Galaxy Book, Galaxy Book Pro, Galaxy Book Pro 360 and Galaxy Book Odyssey allows local attacker to execute SMM memory corruption.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Puntuación base: 7.8
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.17%
- Percentil entre todas las CVEs puntuadas: 6
- Fecha de la puntuación: 7/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (4)
CWE
- NVD-CWE-noinfo
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2023-30738",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2023-30738",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"version": "2.0.3",
"timestamp": "2024-09-19T19:25:02.241235Z"
}
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "mobile.security@samsung.com",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 5.5,
"attackVector": "LOCAL",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "NONE"
},
"impactScore": 3.6,
"exploitabilityScore": 1.8
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.8,
"attackVector": "LOCAL",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 1.8
}
]
},
"affected": [
{
"source": "mobile.security@samsung.com",
"affectedData": [
{
"vendor": "Samsung Mobile",
"product": "Galaxy Book, Galaxy Book Pro, Galaxy Book Pro 360 and Galaxy Book Odyssey",
"versions": [
{
"status": "unaffected",
"version": "Firmware update Oct-2023 Release"
}
],
"defaultStatus": "affected"
}
]
}
],
"published": "2023-10-04T04:15:13.733",
"references": [
{
"url": "https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=10",
"tags": [
"Vendor Advisory"
],
"source": "mobile.security@samsung.com"
},
{
"url": "https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=10",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An improper input validation in UEFI Firmware prior to Firmware update Oct-2023 Release in Galaxy Book, Galaxy Book Pro, Galaxy Book Pro 360 and Galaxy Book Odyssey allows local attacker to execute SMM memory corruption."
},
{
"lang": "es",
"value": "Una validación de entrada incorrecta en el firmware UEFI antes del lanzamiento de la actualización de firmware de octubre de 2023 en Galaxy Book, Galaxy Book Pro, Galaxy Book Pro 360 y Galaxy Book Odyssey permite a un atacante local ejecutar corrupción de memoria SMM."
}
],
"lastModified": "2026-06-17T05:55:32.440",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:samsung:galaxy_book_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D007B248-661D-4E53-A0C0-F3C49ED9540A",
"versionEndExcluding": "oct-2023"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:samsung:galaxy_book:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "4356A941-2FF9-4A68-8EF5-AB86576017DD"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:samsung:galaxy_book_pro_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D675EEE1-9A38-4667-9AE5-31FF8882603E",
"versionEndExcluding": "oct-2023"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:samsung:galaxy_book_pro:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C3A9C42E-F053-4C74-9248-33DAABF550F8"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:samsung:galaxy_book_pro_360_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "54974A58-DD3F-4088-BF2F-D150565B8FE3",
"versionEndExcluding": "oct-2023"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:samsung:galaxy_book_pro_360:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "4662A977-BFA4-41F0-95D9-BB0D8B077D66"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:samsung:galaxy_book_odyssey_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ACBF7D53-8DAF-4853-92EE-298726BD0789",
"versionEndExcluding": "oct-2023"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:samsung:galaxy_book_odyssey:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "402463AD-A75B-4127-BBE9-24AABEE40817"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "mobile.security@samsung.com"
}