Details of VAR-202509-0418

ID

VAR-202509-0418

CVE

CVE-2023-21483

TITLE

Samsung's Galaxy Store Vulnerability in

Trust: 0.8

sources: JVNDB: JVNDB-2025-013516

DESCRIPTION

Improper Access Control vulnerability in Galaxy Store prior to version 4.5.53.6 allows local attacker to access protected data using exported service. Samsung's Galaxy Store Exists in unspecified vulnerabilities.Information may be obtained

Trust: 1.62

sources: NVD: CVE-2023-21483 // JVNDB: JVNDB-2025-013516

AFFECTED PRODUCTS

vendor:	samsung	model:	galaxy store	scope:	lt	version:	4.5.53.6	Trust: 1.0
vendor:	サムスン	model:	galaxy store	scope:	eq	version:	4.5.53.6	Trust: 0.8
vendor:	サムスン	model:	galaxy store	scope:	-	version:	-	Trust: 0.8
vendor:	サムスン	model:	galaxy store	scope:	eq	version:	-	Trust: 0.8

sources: JVNDB: JVNDB-2025-013516 // NVD: CVE-2023-21483

CVSS

SEVERITY

CVSSV2

CVSSV3

mobile.security@samsung.com:	CVE-2023-21483
value:	MEDIUM
Trust: 1.0
nvd@nist.gov:	CVE-2023-21483
value:	MEDIUM
Trust: 1.0
NVD:	CVE-2023-21483
value:	MEDIUM
Trust: 0.8

mobile.security@samsung.com:	CVE-2023-21483
baseSeverity:	MEDIUM
baseScore:	6.4
vectorString:	CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:N
attackVector:	LOCAL
attackComplexity:	HIGH
privilegesRequired:	LOW
userInteraction:	NONE
scope:	CHANGED
confidentialityImpact:	HIGH
integrityImpact:	LOW
availabilityImpact:	NONE
exploitabilityScore:	1.1
impactScore:	4.7
version:	3.1
Trust: 1.0
nvd@nist.gov:	CVE-2023-21483
baseSeverity:	MEDIUM
baseScore:	5.5
vectorString:	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	1.8
impactScore:	3.6
version:	3.1
Trust: 1.0
NVD:	CVE-2023-21483
baseSeverity:	MEDIUM
baseScore:	5.5
vectorString:	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
attackVector:	LOCAL
attackComplexity:	LOW
privilegesRequired:	LOW
userInteraction:	NONE
scope:	UNCHANGED
confidentialityImpact:	HIGH
integrityImpact:	NONE
availabilityImpact:	NONE
exploitabilityScore:	NONE
impactScore:	NONE
version:	3.0
Trust: 0.8

sources: JVNDB: JVNDB-2025-013516 // NVD: CVE-2023-21483 // NVD: CVE-2023-21483

PROBLEMTYPE DATA

problemtype:	NVD-CWE-noinfo	Trust: 1.0
problemtype:	Lack of information (CWE-noinfo) [NVD evaluation ]	Trust: 0.8

sources: JVNDB: JVNDB-2025-013516 // NVD: CVE-2023-21483

EXTERNAL IDS

db:	NVD	id:	CVE-2023-21483	Trust: 2.6
db:	JVNDB	id:	JVNDB-2025-013516	Trust: 0.8

sources: JVNDB: JVNDB-2025-013516 // NVD: CVE-2023-21483

REFERENCES

url:	https://security.samsungmobile.com/serviceweb.smsb?year=2023&month=04	Trust: 1.8
url:	https://nvd.nist.gov/vuln/detail/cve-2023-21483	Trust: 0.8

sources: JVNDB: JVNDB-2025-013516 // NVD: CVE-2023-21483

SOURCES

db:	JVNDB	id:	JVNDB-2025-013516
db:	NVD	id:	CVE-2023-21483

LAST UPDATE DATE

2025-09-11T23:47:18.699000+00:00

SOURCES UPDATE DATE

db:	JVNDB	id:	JVNDB-2025-013516	date:	2025-09-10T00:47:00
db:	NVD	id:	CVE-2023-21483	date:	2025-09-09T16:23:40.953

SOURCES RELEASE DATE

db:	JVNDB	id:	JVNDB-2025-013516	date:	2025-09-10T00:00:00
db:	NVD	id:	CVE-2023-21483	date:	2025-09-03T06:15:44.140