CVE-2023-42579

Improper usage of insecure protocol (i.e

Medium · published December 5, 2023

CVSS v3.1
6.5
EPSS
0%
Percentile
6.1
In the wild
Unconfirmed
What it is

Improper usage of insecure protocol (i.e. HTTP) in SogouSDK of Chinese Samsung Keyboard prior to versions 5.3.70.1 in Android 11, 5.4.60.49, 5.4.85.5, 5.5.00.58 in Android 12, and 5.6.00.52, 5.6.10.42, 5.7.00.45 in Android 13 allows adjacent attackers to access keystroke data using Man-in-the-Middle attack.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00171 · 6.1th percentile
Published
2023-12-05T02:44Z
EPSS history
Timeline
  • 05 DEC 02:44Z
    Improper usage of insecure protocol (i.e
    cvelistv5