CVE-2023-30731

MediumCVSS 4.6/10Last modified Jun 17, 2026

Description

Logic error in package installation via debugger command prior to SMR Oct-2023 Release 1 allows physical attacker to install an application that has different build type.

Metrics

CVSS 3.1 4.6/10CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Affected software

No affected versions have been published.

Timeline

Published: Oct 4, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-307323.3Improper access control in system property prior to SMR Oct-2023 Release 1 allows local attacker to get CPU serial number.CVE-2023-307337.8Stack-based Buffer Overflow in vulnerability HDCP trustlet prior to SMR Oct-2023 Release 1 allows local privileged attackers to perform code CVE-2023-307345.5Improper access control vulnerability in Samsung Health prior to version 6.24.3.007 allows attackers to access sensitive information via imp CVE-2023-307353.3Improper Preservation of Permissions vulnerability in SAssistant prior to version 8.7 allows local attackers to access backup data in SAssis CVE-2023-307365.4Improper authorization in PushMsgReceiver of Samsung Assistant prior to version 8.7.00.1 allows attacker to execute javascript interface. To CVE-2023-307375.5Improper access control vulnerability in Samsung Health prior to version 6.24.3.007 allows attackers to access sensitive information via imp CVE-2023-307387.8An improper input validation in UEFI Firmware prior to Firmware update Oct-2023 Release in Galaxy Book, Galaxy Book Pro, Galaxy Book Pro 360 CVE-2023-307397.8Arbitrary File Descriptor Write vulnerability in libsec-ril prior to SMR Nov-2023 Release 1 allows local attacker to execute arbitrary code.CVE-2023-30745.4Cross-site Scripting (XSS) - Stored in GitHub repository tsolucio/corebos prior to 8.CVE-2023-307407.6SAP BusinessObjects Business Intelligence Platform - versions 420, 430, allows an authenticated attacker to access sensitive information whi CVE-2023-307416.1Due to insufficient input validation, SAP BusinessObjects Business Intelligence Platform - versions 420, 430, allows an unauthenticated atta CVE-2023-307426.1SAP CRM (WebClient UI) - versions S4FND 102, S4FND 103, S4FND 104, S4FND 105, S4FND 106, S4FND 107, WEBCUIF 700, WEBCUIF 701, WEBCUIF 731, W