{"id":"CVE-2023-42577","aliases":["EUVD-2023-47010","GHSA-93gj-m35w-q9v5"],"status":"published","title":"Improper Access Control in Samsung Voice Recorder prior to versions 21.4.15.01 in Android 12 and...","description":"Improper Access Control in Samsung Voice Recorder prior to versions 21.4.15.01 in Android 12 and Android 13, 21.4.50.17 in Android 14 allows physical attackers to access Voice Recorder information on the lock screen.","severity":{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-09","score":0.00303,"percentile":0.23292,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2023-12-05T02:44:35Z","modified":"2026-06-17T06:24:07Z","products":[{"vendor":"samsung","product":"samsung_voice_recorder"},{"vendor":"samsung mobile","product":"samsung voice recorder"}],"references":[{"url":"https://security.samsungmobile.com/serviceWeb.smsb?year=2023\u0026month=12","tags":["x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-42577"},{"url":"https://github.com/advisories/GHSA-93gj-m35w-q9v5"}],"sources":{"cve":[{"id":"CVE-2023-42577","description":"Improper Access Control in Samsung Voice Recorder prior to versions 21.4.15.01 in Android 12 and Android 13, 21.4.50.17 in Android 14 allows physical attackers to access Voice Recorder information on the lock screen.","status":"published","published":"2023-12-05T02:44:35.045Z","modified":"2024-08-02T19:23:39.767Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna"}],"updated_at":"2026-11-02T14:35:17.812395Z"}],"euvd":[{"id":"EUVD-2023-47010","description":"Improper Access Control in Samsung Voice Recorder prior to versions 21.4.15.01 in Android 12 and Android 13, 21.4.50.17 in Android 14 allows physical attackers to access Voice Recorder information on the lock screen.","status":"published","published":"2023-12-05T02:44:35Z","modified":"2024-08-02T19:23:39Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-03T03:50:00.594157Z"}],"ghsa":[{"id":"GHSA-93gj-m35w-q9v5","title":"Improper Access Control in Samsung Voice Recorder prior to versions 21.4.15.01 in Android 12 and...","description":"Improper Access Control in Samsung Voice Recorder prior to versions 21.4.15.01 in Android 12 and Android 13, 21.4.50.17 in Android 14 allows physical attackers to access Voice Recorder information on the lock screen.","status":"published","published":"2023-12-05T03:30:23Z","modified":"2023-12-05T03:30:34Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-02T14:55:09.149913Z"}],"nvd":[{"id":"CVE-2023-42577","description":"Improper Access Control in Samsung Voice Recorder prior to versions 21.4.15.01 in Android 12 and Android 13, 21.4.50.17 in Android 14 allows physical attackers to access Voice Recorder information on the lock screen.","status":"published","published":"2023-12-05T03:15:18.623Z","modified":"2026-06-17T06:24:07.133Z","cvss":[{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":2.4,"vector":"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"primary"}],"updated_at":"2026-11-02T14:08:52.544469Z"}]}}