CVE-2023-21462

LowCVSS 3.3/10Last modified Jun 17, 2026

Description

The sensitive information exposure vulnerability in Quick Share Agent prior to versions 3.5.14.18 in Android 12 and 3.5.16.20 in Android 13 allows to local attacker to access MAC address without related permission.

Metrics

CVSS 3.1 3.3/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-215

Affected software

VendorProductVersions
Samsung MobileQuick Share Agent>= unspecified, < 3.5.14.18 in Android 12 and 3.5.16.20 in Android 13

References

Timeline

Published
Mar 16, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-214633.3Improper access control vulnerability in MyFiles application prior to versions 12.2.09.0 in Android 11, 13.1.03.501 in Android 12 and 14.1.0CVE-2023-214643.3Improper access control in Samsung Calendar prior to versions 12.4.02.9000 in Android 13 and 12.3.08.2000 in Android 12 allows local attackeCVE-2023-214655.5Improper access control vulnerability in BixbyTouch prior to version 3.2.02.5 in China models allows untrusted applications access local filCVE-2023-214663.3PendingIntent hijacking vulnerability in CertificatePolicy in framework prior to SMR Apr-2023 Release 1 allows local attackers to access conCVE-2023-214679.8Error in 3GPP specification implementation in Exynos baseband prior to SMR Apr-2023 Release 1 allows incorrect handling of unencrypted messaCVE-2023-214687.8Improper access control vulnerability in Telephony prior to SMR Apr-2023 Release 1 allows attackers to access files with escalated permissioCVE-2023-214693.3Improper access control vulnerability in SLocation prior to SMR Apr-2022 Release 1 allows local attackers to get device location informationCVE-2023-21479.8A vulnerability was found in Campcodes Online Thesis Archiving System 1.0. It has been rated as critical. Affected by this issue is some unkCVE-2023-214703.3Improper access control vulnerability in SLocation prior to SMR Apr-2022 Release 1 allows local attackers to get device location informationCVE-2023-214713.3Improper access control vulnerability in SemClipboard prior to SMR Apr-2023 Release 1 allows attackers to read arbitrary files with system pCVE-2023-214726.8Improper input validation with Exynos Fastboot USB Interface prior to SMR Apr-2023 Release 1 allows a physical attacker to execute arbitraryCVE-2023-214736.8Improper input validation with Exynos Fastboot USB Interface prior to SMR Apr-2023 Release 1 allows a physical attacker to execute arbitrary
CVE-2023-21462: Low severity, CVSS 3.3 | Vulnix