Skip to main content

Health CVE-2023-42539

MEDIUM
2023-11-07 mobile.security@samsung.com
Samsung Information Disclosure Health
5.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.5 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Lifecycle Timeline

1
CVE Published
Nov 07, 2023 - 08:15 nvd
MEDIUM 5.5

DescriptionNVD

PendingIntent hijacking vulnerability in ChallengeNotificationManager in Samsung Health prior to version 6.25 allows local attackers to access data.

AnalysisAI

PendingIntent hijacking vulnerability in ChallengeNotificationManager in Samsung Health prior to version 6.25 allows local attackers to access data. Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

PendingIntent hijacking vulnerability in ChallengeNotificationManager in Samsung Health prior to version 6.25 allows local attackers to access data. Affected products include: Samsung Health. Version information: version 6.25.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Health

View all
CVE-2023-30723 CRITICAL
9.8 Sep 06

Improper input validation vulnerability in Samsung Health prior to version 6.24.2.011 allows attackers to write arbitrar
CVE-2021-25401 HIGH
7.8 Jun 11

Intent redirection vulnerability in Samsung Health prior to version 6.16 allows attacker to execute privileged action. R
CVE-2025-21019 MEDIUM
5.5 Aug 06

Improper authorization in Samsung Health prior to version 6.30.1.003 allows local attackers to access data in Samsung He
CVE-2023-30737 MEDIUM
5.5 Oct 04

Improper access control vulnerability in Samsung Health prior to version 6.24.3.007 allows attackers to access sensitive
CVE-2023-30734 MEDIUM
5.5 Oct 04

Improper access control vulnerability in Samsung Health prior to version 6.24.3.007 allows attackers to access sensitive
CVE-2021-25506 MEDIUM
5.5 Nov 05

Non-existent provider in Samsung Health prior to 6.19.1.0001 allows attacker to access it via malicious content provider
CVE-2021-25425 MEDIUM
5.3 Jun 11

Improper check vulnerability in Samsung Health prior to version 6.17 allows attacker to read internal cache data via exp
CVE-2024-34597 LOW
3.3 Jul 02

Improper input validation in Samsung Health prior to version 6.27.0.113 allows local attackers to write arbitrary docume

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2023-42539 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy