Denial of Service Vulnerability in Samsung Exynos Modem Chipsets
CVE-2023-24033

9.8CRITICAL

Key Information:

Vendor
Samsung
Status
Exynos Modem 5300 Firmware
Vendor
CVE Published:
13 March 2023

Summary

The Samsung Exynos Modem 5123, Exynos Modem 5300, Exynos 980, Exynos 1080, and Exynos Auto T512 are vulnerable due to insufficient validation of format types specified by the Session Description Protocol (SDP) within their baseband modem chipsets. This flaw can potentially lead to a denial of service, impacting the integrity and availability of communication services relying on affected modem chipsets. Proper security measures and updates must be implemented to mitigate the risks associated with this vulnerability.

References

https://semiconductor.samsung.com/processor/modem/
https://semiconductor.samsung.com/support/quality-support...
http://packetstormsecurity.com/files/172137/Shannon-Baseb...

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.