VulnerabilityModified

CVE-2023-43122

Samsung Mobile Processor and Wearable Processor (Exynos 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, and W920) allow Information Disclosure in the Bootloader.

MEDIUM 4.6EPSS 0.29%

Does this matter?

Lower severity and a low EPSS score (0.29%). Track it; it rarely justifies an emergency change on its own.

Description

Samsung Mobile Processor and Wearable Processor (Exynos 980, 850, 1080, 2100, 2200, 1280, 1380, 1330, and W920) allow Information Disclosure in the Bootloader.

CVSS 3.1: 4.6 MEDIUMCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS: 0.29% probability · 22th percentile
CISA KEV: Not listed
Weakness: CWE-787
Affected: samsung/exynos 980 firmware · samsung/exynos 850 firmware · samsung/exynos 1080 firmware · samsung/exynos 2100 firmware · samsung/exynos 2200 firmware · samsung/exynos 1280 firmware · samsung/exynos 1380 firmware · samsung/exynos 1330 firmware · samsung/exynos w920 firmware
Source: cve@mitre.org

References

https://semiconductor.samsung.com/support/quality-support/product-security-updates/Vendor Advisory
https://semiconductor.samsung.com/support/quality-support/product-security-updates/Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.