SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2023-42552

Implicit intent hijacking vulnerability in Firewall application prior to versions 12.1.00.24 in Android 11, 13.1.00.16 in Android 12 and 14.1.00.7 in Android 13 allows 3rd party application to tamper the database of Firewall.

LOW 3.3EPSS 0.21%

Does this matter?

Lower severity and a low EPSS score (0.21%). Track it; it rarely justifies an emergency change on its own.

Description

Implicit intent hijacking vulnerability in Firewall application prior to versions 12.1.00.24 in Android 11, 13.1.00.16 in Android 12 and 14.1.00.7 in Android 13 allows 3rd party application to tamper the database of Firewall.

CVSS 3.1
3.3 LOWCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
EPSS
0.21% probability · 11th percentile
CISA KEV
Not listed
Affected
samsung/firewall
Source
mobile.security@samsung.com

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.