Detections
Analytics

Samsung Mobile Improper configuration in Samsung Internet (SVE-2023-0322)

medium Nessus Plugin ID 191752

Language:

Synopsis

The version of Samsung Internet running on the Samsung mobile device is affected by a vulnerability.

Description

Improper configuration in Samsung Internet prior to version 21.0.0.41 allows attacker to bypass SameSite Cookie.
Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Solution

Upgrade to Samsung Internet version 21.0.0.41 or later

See Also

http://www.nessus.org/u?0af7e341

Plugin Details

Severity: Medium

ID: 191752

File Name: samsung_sve-2023-0322.nbin

Version: 1.5

Type: local

Published: 3/8/2024

Updated: 4/23/2024

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Low

Score: 3.6

CVSS v2

Risk Factor: High

Base Score: 7.8

Temporal Score: 5.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:N/A:N

CVSS Score Source: CVE-2023-30674

CVSS v3

Risk Factor: Medium

Base Score: 6.5

Temporal Score: 5.7

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:samsung:internet

Required KB Items: mdm/dependency/unlocked

Exploit Ease: No known exploits are available

Patch Publication Date: 2/25/2023

Vulnerability Publication Date: 2/25/2023

Reference Information

CVE: CVE-2023-30674