Improper Input Validation in Samsung Health by Samsung
CVE-2023-30723

5.5MEDIUM

Key Information:

Vendor
Samsung
Status
Samsung Health
Vendor
CVE Published:
6 September 2023

Summary

Samsung Health has a vulnerability stemming from improper input validation, which exposes users to potential threats. This flaw allows attackers to exploit the application by writing arbitrary files, leveraging the application's privileges. The issue affects versions prior to 6.24.2.011, necessitating immediate updates to mitigate the risk.

Affected Version(s)

Samsung Health 6.24.2.011

References

https://security.samsungmobile.com/serviceWeb.smsb?year=2...

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.