CVE-2023-21423 MEDIUM

CVE-2023-21423

Vendor Samsung Mobile

Product Samsung Mobile Devices

Weakness CWE-285

Published February 9, 2023

Last update March 24, 2025

View on NVD All CVEs

CVSS base score

5.1/10

Attack vector Local

Attack complexity Low

Privileges required None

User interaction None

Confidentiality Low

Integrity None

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

What the vulnerability does

01Description

Improper authorization vulnerability in ChnFileShareKit prior to SMR Jan-2023 Release 1 allows attacker to control BLE advertising without permission using unprotected action.

Key dates

02Disclosure timeline

February 9, 2023 CVE published

March 24, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-21423

Related vulnerabilities

04Related CVE

CVE-2025-4819 y_project RuoYi Offline Logout batchForceLogout improper authorization CVE-2025-65021 Rallly Has Unauthorized Poll Finalization via Insecure Direct Object Reference (IDOR) CVE-2023-1910 Getwid – Gutenberg Blocks <= 1.8.3 - Improper Authorization via get_remote_templates REST endpoint CVE-2026-3764 SourceCodester Client Database Management System superadmin_user_update.php improper authorization CVE-2024-23667

Identifiers

CVE CVE-2023-21423

CWE CWE-285

CVSS 5.1 / MEDIUM

Affected versions

Vendor Samsung Mobile

Product Samsung Mobile Devices

Affected ≥ S(12), T(13) and < SMR Jan-2023 Release 1