CVE-2023-42541

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

Improper authorization in PushClientProvider of Samsung Push Service prior to version 3.4.10 allows attacker to access unique id.

Metrics

CVSS 3.1 5.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-863CWE-285

Affected software

No affected versions have been published.

Timeline

Published
Nov 7, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-425423.3Improper access control vulnerability in Samsung Push Service prior to 3.4.10 allows local attackers to get register ID to identify the deviCVE-2023-425437.5Improper verification of intent by broadcast receiver vulnerability in Bixby Voice prior to version 3.3.35.12 allows attackers to access arbCVE-2023-425445.5Improper access control vulnerability in Quick Share prior to 13.5.52.0 allows local attacker to access local files.CVE-2023-425457.5Use of implicit intent for sensitive communication vulnerability in Phone prior to versions 12.7.20.12 in Android 11, 13.1.48, 13.5.28 in AnCVE-2023-425466.5Use of implicit intent for sensitive communication vulnerability in startAgreeToDisclaimerActivity in Samsung Account prior to version 14.5.CVE-2023-425476.5Use of implicit intent for sensitive communication vulnerability in startEmailValidationActivity in Samsung Account prior to version 14.5.00CVE-2023-425486.5Use of implicit intent for sensitive communication vulnerability in startMandatoryCheckActivity in Samsung Account prior to version 14.5.00.CVE-2023-425496.5Use of implicit intent for sensitive communication vulnerability in startNameValidationActivity in Samsung Account prior to version 14.5.00.CVE-2023-42555.5An out-of-bounds write issue has been discovered in the backspace handling of the checkType() function in etc.c within the W3M application. CVE-2023-425506.5Use of implicit intent for sensitive communication vulnerability in startSignIn in Samsung Account prior to version 14.5.00.7 allows attackeCVE-2023-425516.5Use of implicit intent for sensitive communication vulnerability in startTncActivity in Samsung Account prior to version 14.5.00.7 allows atCVE-2023-425523.3Implicit intent hijacking vulnerability in Firewall application prior to versions 12.1.00.24 in Android 11, 13.1.00.16 in Android 12 and 14.
CVE-2023-42541: Medium severity, CVSS 5.3 | Vulnix