Vulnerability Details CVE-2023-30738
An improper input validation in UEFI Firmware prior to Firmware update Oct-2023 Release in Galaxy Book, Galaxy Book Pro, Galaxy Book Pro 360 and Galaxy Book Odyssey allows local attacker to execute SMM memory corruption.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 16.1%
CVSS Severity
CVSS v3 Score 5.5
References
Products affected by CVE-2023-30738
-
cpe:2.3:h:samsung:galaxy_book:-
-
cpe:2.3:h:samsung:galaxy_book_odyssey:-
-
cpe:2.3:h:samsung:galaxy_book_pro:-
-
cpe:2.3:h:samsung:galaxy_book_pro_360:-
-
cpe:2.3:o:samsung:galaxy_book_firmware:*
-
cpe:2.3:o:samsung:galaxy_book_odyssey_firmware:*
-
cpe:2.3:o:samsung:galaxy_book_pro_360_firmware:*
-
cpe:2.3:o:samsung:galaxy_book_pro_firmware:*