Skip to content
OpenAdvisories
Medium · 5.1 CVE-2023-21423 EUVD-2023-25591GHSA-g2cc-9fq5-9xww

Improper authorization vulnerability in ChnFileShareKit prior to SMR Jan-2023 Release 1 allows attacker to control BLE advertising without …

Published Feb 9, 2023 · Updated Mar 24, 2025 · Assigned by Samsung Mobile

Vendor: Samsung Mobile Product: Samsung Mobile Devices

Description

Improper authorization vulnerability in ChnFileShareKit prior to SMR Jan-2023 Release 1 allows attacker to control BLE advertising without permission using unprotected action.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices S(12), T(13) – < SMR Jan-2023 Release 1 SMR Jan-2023 Release 1

References