CVE-2023-42571 HIGH

CVE-2023-42571

Published December 5, 2023
Last update December 2, 2024
View on NVD All CVEs

CVSS base score

7.6/10
Attack vector Physical
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

Abuse of remote unlock in Find My Mobile prior to version 7.3.13.4 allows physical attacker to unlock the device remotely by resetting the Samsung Account password with SMS verification when user lost the device.

Key dates

02Disclosure timeline

December 5, 2023 CVE published
December 2, 2024 Record updated