What is CVE-2023-42571?

CVE-2023-42571 is a high-severity vulnerability in Samsung Find_my_mobile, classified under CWE-287: IMPROPER AUTHENTICATION. CVSS score: 7.6/10. Published 2023-12-05.

How severe is CVE-2023-42571?

High severity. CVSS v3 base score is 7.6 out of 10.

Vulnerability in Samsung Find_my_mobile

CVE-2023-42571

Abuse of remote unlock in Find My Mobile prior to version 7.3.13.4 allows physical attacker to unlock the device remotely by resetting the Samsung Account password with SMS verification when user lost the device.

EPSS: 0.003 (24.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.6 (High). Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H.

Affected products

Samsung Find_my_mobile
Samsung Mobile Find My — versions 7.3.13.4

References

mobile.security@samsung.com (Vendor Advisory)

Frequently asked questions

What is CVE-2023-42571?: CVE-2023-42571 is a high-severity vulnerability in Samsung Find_my_mobile, classified under CWE-287: IMPROPER AUTHENTICATION. CVSS score: 7.6/10. Published 2023-12-05.
How severe is CVE-2023-42571?: High severity. CVSS v3 base score is 7.6 out of 10.