2024-06-05 20:03:24 +00:00
{
"id" : "CVE-2024-28818" ,
"sourceIdentifier" : "cve@mitre.org" ,
"published" : "2024-06-05T19:15:15.150" ,
2024-12-08 03:06:42 +00:00
"lastModified" : "2024-11-21T09:06:59.530" ,
"vulnStatus" : "Modified" ,
2024-07-14 02:06:08 +00:00
"cveTags" : [ ] ,
2024-06-05 20:03:24 +00:00
"descriptions" : [
{
"lang" : "en" ,
2024-06-25 22:03:12 +00:00
"value" : "An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, Exynos 990, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 2400, Exynos Modem 5123, Exynos Modem 5300. The baseband software does not properly check states specified by the RRC (Radio Resource Control) module. This can lead to disclosure of sensitive information."
2024-06-06 16:03:37 +00:00
} ,
{
"lang" : "es" ,
"value" : "Se descubri\u00f3 un problema en el procesador m\u00f3vil, el procesador port\u00e1til, el procesador automotriz y el m\u00f3dem Samsung Exynos 980, 990, 850, 1080, 2100, 2200, 1280, 1380, 1330, 2400, 9110, W920, W930, M\u00f3dem 5123, M\u00f3dem 5300, y Auto T5123. El software de banda base no verifica adecuadamente los estados especificados por el m\u00f3dulo RRC (Control de recursos de radio). Esto puede dar lugar a la divulgaci\u00f3n de informaci\u00f3n confidencial."
2024-06-05 20:03:24 +00:00
}
] ,
"metrics" : {
"cvssMetricV31" : [
2024-06-27 18:03:11 +00:00
{
2024-12-08 03:06:42 +00:00
"source" : "cve@mitre.org" ,
"type" : "Secondary" ,
2024-06-27 18:03:11 +00:00
"cvssData" : {
"version" : "3.1" ,
2024-12-08 03:06:42 +00:00
"vectorString" : "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N" ,
"baseScore" : 5.9 ,
"baseSeverity" : "MEDIUM" ,
2024-06-27 18:03:11 +00:00
"attackVector" : "NETWORK" ,
2024-12-08 03:06:42 +00:00
"attackComplexity" : "HIGH" ,
2024-06-27 18:03:11 +00:00
"privilegesRequired" : "NONE" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "HIGH" ,
"integrityImpact" : "NONE" ,
2024-12-08 03:06:42 +00:00
"availabilityImpact" : "NONE"
2024-06-27 18:03:11 +00:00
} ,
2024-12-08 03:06:42 +00:00
"exploitabilityScore" : 2.2 ,
2024-06-27 18:03:11 +00:00
"impactScore" : 3.6
} ,
2024-06-05 20:03:24 +00:00
{
2024-12-08 03:06:42 +00:00
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
2024-06-05 20:03:24 +00:00
"cvssData" : {
"version" : "3.1" ,
2024-12-08 03:06:42 +00:00
"vectorString" : "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N" ,
"baseScore" : 7.5 ,
"baseSeverity" : "HIGH" ,
2024-06-05 20:03:24 +00:00
"attackVector" : "NETWORK" ,
2024-12-08 03:06:42 +00:00
"attackComplexity" : "LOW" ,
2024-06-05 20:03:24 +00:00
"privilegesRequired" : "NONE" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "HIGH" ,
"integrityImpact" : "NONE" ,
2024-12-08 03:06:42 +00:00
"availabilityImpact" : "NONE"
2024-06-05 20:03:24 +00:00
} ,
2024-12-08 03:06:42 +00:00
"exploitabilityScore" : 3.9 ,
2024-06-05 20:03:24 +00:00
"impactScore" : 3.6
}
]
} ,
2024-06-27 18:03:11 +00:00
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "NVD-CWE-noinfo"
}
]
}
] ,
"configurations" : [
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:samsung:exynos_980_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "5F18F62E-2012-442E-BE60-6E76325D1824"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:samsung:exynos_980:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "0D8701B6-6989-44D1-873A-A1823BFD7CCC"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:samsung:exynos_990_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "BCF6C91D-DECE-4630-85FE-C22EF2B9160A"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:samsung:exynos_990:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "87FE8214-E165-4874-BB5A-3C4298708039"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:samsung:exynos_1080_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "43DE4D6F-D662-46F2-93BC-9AE950320BDE"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:samsung:exynos_1080:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "EE06CD56-8BFD-4208-843A-179E3E6F5C10"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:samsung:exynos_2100_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "89B88BFE-3C82-498C-8EC1-5784836DB1A1"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:samsung:exynos_2100:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "9385885D-654A-496E-8029-7C6D9B077193"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:samsung:exynos_2200_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "63C0D9AC-BD23-48C9-83E7-301DEC06E583"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:samsung:exynos_2200:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "A72ADEBB-ED72-4A5B-BB27-95EDE43F8116"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:samsung:exynos_1280_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "BD1A7B09-9031-4E54-A24F-3237C054166B"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:samsung:exynos_1280:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "DFC68046-2F08-40D1-B158-89D8D9263541"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:samsung:exynos_1380_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "D381478B-C638-4663-BD71-144BE4B02E46"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:samsung:exynos_1380:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "61E72146-72FE-4B54-AB79-3C665E7F016C"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:samsung:exynos_1330_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "C2635646-DD6A-4735-8E01-F45445584832"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:samsung:exynos_1330:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "AA0F8A58-71B7-4503-A03A-6FB4282D75BD"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:samsung:exynos_2400_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "16D9272E-1794-48FF-B6A4-8F48395BA38E"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:samsung:exynos_2400:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "932F5FB3-5527-44D7-9DD9-EF03963E3CA3"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:samsung:exynos_modem_5123_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "06B60F97-1320-44F5-970C-BBA29F375524"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:samsung:exynos_modem_5123:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "72419735-076A-4E72-869F-0C7D801371C1"
}
]
}
]
} ,
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:samsung:exynos_modem_5300_firmware:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "4F66A096-7BA3-47D6-98F4-879C3A4C1FFC"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:h:samsung:exynos_modem_5300:-:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "CE202894-D48A-4B9E-B3BD-28529967A0B3"
}
]
}
]
}
] ,
2024-06-05 20:03:24 +00:00
"references" : [
{
"url" : "https://semiconductor.samsung.com/support/quality-support/product-security-updates/" ,
2024-06-27 18:03:11 +00:00
"source" : "cve@mitre.org" ,
"tags" : [
"Vendor Advisory"
]
2024-12-08 03:06:42 +00:00
} ,
{
"url" : "https://semiconductor.samsung.com/support/quality-support/product-security-updates/" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Vendor Advisory"
]
2024-06-05 20:03:24 +00:00
}
]
}