1. Home
  2. CVE Database
  3. CVE-2023-30704
LOW · 3.8

CVE-2023-30704

Improper Authorization vulnerability in Samsung Internet prior to version 22.0.0.35 allows physical attacker access downloaded files in Secret Mode without user authentication.

Vulnerability Description

Improper Authorization vulnerability in Samsung Internet prior to version 22.0.0.35 allows physical attacker access downloaded files in Secret Mode without user authentication.

CVSS Score

3.8

LOW

CVSS:3.1/AV:P/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
Attack Vector
PHYSICAL
Attack Complexity
HIGH
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
SamsungInternet< 22.0.0.35

References

FAQ

What is CVE-2023-30704?

CVE-2023-30704 is a vulnerability with a CVSS score of 3.8 (LOW). Improper Authorization vulnerability in Samsung Internet prior to version 22.0.0.35 allows physical attacker access downloaded files in Secret Mode without user authentication.

How severe is CVE-2023-30704?

CVE-2023-30704 has been rated LOW with a CVSS base score of 3.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-30704?

Check the references section above for vendor advisories and patch information. Affected products include: Samsung Internet.