CVE-2023-31114

An issue was discovered in the Shannon RCS component in Samsung Exynos Modem 5123 and 5300

Critical · published June 7, 2023

CVSS v3.1
9.1
EPSS
1%
Percentile
45.8
In the wild
Unconfirmed
What it is

🚨 Just one crafty app is all it takes to query sensitive SIM status data! The Samsung Exynos Modem 5123 and 5300 are at risk due to a serious resource mismanagement issue. 🔥 Think of it like a restaurant where the waiter mistakenly serves your meal to another table, revealing your dietary restrictions. This flaw allows a malicious app to access critical information that it shouldn't, much like a nosy diner eavesdropping on your order. An attacker could craft an application to exploit this vulnerability, leading to unauthorized access to SIM card information. This not only poses a severe privacy risk but could also allow for further malicious activities on the device. Make no mistake – this could lead to outright chaos!

Put simply

Think of it like a restaurant where the waiter mistakenly serves your meal to another table, revealing your dietary restrictions. This flaw allows a malicious app to access critical information that it shouldn't, much like a nosy diner eavesdropping on your order. This vulnerability arises from incorrect resource transfers between operational environments in the Shannon RCS component, enabling unintended queries of the SIM status when handled by a malicious application.

What to do

An attacker could craft an application to exploit this vulnerability, leading to unauthorized access to SIM card information. This not only poses a severe privacy risk but could also allow for further malicious activities on the device. Make no mistake – this could lead to outright chaos! To protect your devices, manufacturers should issue immediate patches for the Exynos Modem 5123 and 5300. Users should also check for firmware updates regularly and only install trusted applications from reputable sources. 🛡️ You've got this! Stay vigilant, update your systems, and keep your data secure! 💪✨

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00560 · 45.8th percentile
Published
2023-06-07T00:00Z
EPSS history
Timeline
  • 07 JUN 00:00Z
    An issue was discovered in the Shannon RCS component in Samsung Exynos Modem 5123 and 5300
    cvelistv5