CVE-2023-37377: An issue was discovered in Samsung Exynos Mobile Processor and Wearable Processor (Exynos 980, Exynos 850, Exynos 2100, and Exynos W920)

High severity · published Sep 8, 2023

CVE-2023-37377

An issue was discovered in Samsung Exynos Mobile Processor and Wearable Processor (Exynos 980, Exynos 850, Exynos 2100, and Exynos W920)

7.5

CVSS

0.3%

EPSS

On KEV

Description

An issue was discovered in Samsung Exynos Mobile Processor and Wearable Processor (Exynos 980, Exynos 850, Exynos 2100, and Exynos W920). Improper handling of length parameter inconsistency can cause incorrect packet filtering.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Attack vector

Network

Complexity

Low

Privileges

None

User interaction

None

Confidentiality

None

Integrity

None

Availability

High

Scope

Unchanged

Exploitation

Is it being used?

Exploit prediction (EPSS)0.3% · higher than 28% of CVEs

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

Affected products

Which versions

Exynos 2100 Firmware · Samsung

All versions, or not specified · source: NVD

Exynos 850 Firmware · Samsung

All versions, or not specified · source: NVD

Exynos 980 Firmware · Samsung

All versions, or not specified · source: NVD

Exynos W920 Firmware · Samsung

All versions, or not specified · source: NVD

Affected product

Exynos 2100 Firmware

Samsung

All Exynos 2100 Firmware CVEs

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2023-37377

CVE.org

https://www.cve.org/CVERecord?id=CVE-2023-37377

Vendor Advisory

https://semiconductor.samsung.com/support/quality-support/product-security-updates/