CVE-2023-49927

MEDIUM
Published Jun 5, 2024 Modified Nov 21, 2024 CWE-311 CWE-331

Description

An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, Exynos 990, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 9110, Exynos W920, Exynos Modem 5123, Exynos Modem 5300. The baseband software does not properly check format types specified by the RRC. This can lead to a lack of encryption.

Is your site exposed to CVE-2023-49927?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

5.3
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness Type (CWE)

CWE-311 CWE-311
CWE-331 CWE-331

Affected Products

Vendor Product
samsung exynos_9820_firmware
samsung exynos_9820
samsung exynos_9825_firmware
samsung exynos_9825
samsung exynos_980_firmware
samsung exynos_980
samsung exynos_990_firmware
samsung exynos_990
samsung exynos_850_firmware
samsung exynos_850
samsung exynos_1080_firmware
samsung exynos_1080
samsung exynos_2100_firmware
samsung exynos_2100
samsung exynos_2200_firmware
samsung exynos_2200
samsung exynos_1280_firmware
samsung exynos_1280
samsung exynos_1380_firmware
samsung exynos_1380
samsung exynos_1330_firmware
samsung exynos_1330
samsung exynos_modem_5123_firmware
samsung exynos_modem_5123
samsung exynos_modem_5300_firmware
samsung exynos_modem_5300

References

Frequently Asked Questions

What is CVE-2023-49927? +
An issue was discovered in Samsung Mobile Processor, Wearable Processor, and Modem Exynos 980, Exynos 990, Exynos 850, Exynos 1080, Exynos 2100, Exynos 2200, Exynos 1280, Exynos 1380, Exynos 1330, Exynos 9110, Exynos W920, Exynos Modem 5123, Exynos Modem 5300. The baseband software does not properly check format types specified by the RRC. This can lead to a lack of encryption. It has a CVSS v3.1 base score of 5.3 (MEDIUM).
How severe is CVE-2023-49927? +
CVE-2023-49927 has a CVSS v3.1 score of 5.3 out of 10, rated MEDIUM. This is a medium-severity vulnerability that should be remediated as part of regular maintenance.
What products are affected by CVE-2023-49927? +
CVE-2023-49927 affects products from samsung, specifically: exynos_1080, exynos_1080_firmware, exynos_1280, exynos_1280_firmware, exynos_1330, exynos_1330_firmware, exynos_1380, exynos_1380_firmware, exynos_2100, exynos_2100_firmware, exynos_2200, exynos_2200_firmware, exynos_850, exynos_850_firmware, exynos_980, exynos_980_firmware, exynos_9820, exynos_9820_firmware, exynos_9825, exynos_9825_firmware, exynos_990, exynos_990_firmware, exynos_modem_5123, exynos_modem_5123_firmware, exynos_modem_5300, exynos_modem_5300_firmware. Check the affected products table above for specific version ranges.
How do I check if I'm vulnerable to CVE-2023-49927? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2024-7396

Missing encryption of sensitive data in Korenix JetPort 5601v3 allows Eavesdropping.This issue affects JetPort 5601v3: through 1.2.
CVE-2025-36751

Encryption is missing on the configuration interface for Growatt ShineLan-X and MIC 3300TL-X. This allows an attacker with access to …
CVE-2024-38283

Sensitive customer information is stored in the device without encryption.
CVE-2025-1243

The Temporal api-go library prior to version 1.44.1 did not send `update response` information to Data Converter when the proxy …
CVE-2025-47274

ToolHive is a utility designed to simplify the deployment and management of Model Context Protocol (MCP) servers. Due to the …
CVE-2025-40680

Lack of sensitive data encryption in CapillaryScope v2.5.0 of Capillary io, which stores both the proxy credentials and the JWT …

Don't wait for an exploit

Scan your website for vulnerabilities like CVE-2023-49927 — free, no signup required.