CVE-2023-28613

CVSS 6.8 MEDIUMEPSS 1.2%CWE-190

Vexday Risk Score

13Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 6.8EPSS 1.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

04 abr 2023Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

An issue was discovered in Samsung Exynos Mobile Processor and Baseband Modem Processor for Exynos 1280, Exynos 2200, and Exynos Modem 5300. An integer overflow in IPv4 fragment handling can occur due to insufficient parameter validation when reassembling these fragments.

CVSS:3.1/AC:H/AV:N/A:H/C:N/I:N/PR:N/S:C/UI:N

Produtos afetados

n/a · n/a

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

http://packetstormsecurity.com/files/172177/Shannon-Baseband-Integer-Overflow.html https://semiconductor.samsung.com/processor/mobile-processor/https://semiconductor.samsung.com/processor/modem/https://semiconductor.samsung.com/support/quality-support/product-security-updates/