Skip to content
OpenAdvisories
Medium · 5.4 CVE-2023-21427 EUVD-2023-25595GHSA-7f3p-rrw7-99cg

Improper access control vulnerability in NfcTile prior to SMR Jan-2023 Release 1 allows to attacker to use NFC without user recognition.

Published Feb 9, 2023 · Updated Mar 24, 2025 · Assigned by Samsung Mobile

Vendor: Samsung Mobile Product: Samsung Mobile Devices

Description

Improper access control vulnerability in NfcTile prior to SMR Jan-2023 Release 1 allows to attacker to use NFC without user recognition.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices R(11), S(12), T(13) – < SMR Jan-2023 Release 1 SMR Jan-2023 Release 1

References