CVE-2023-30710: 
NixOS vulnerability analysis and mitigation

Improper input validation vulnerability in Knox AI prior to SMR Sep-2023 Release 1 allows local attackers to launch privileged activities. The vulnerability is tracked as CVE-2023-30710 and has a CVSS v3.1 base score of 7.8 HIGH (NIST) and 8.5 HIGH (Samsung Mobile) (NVD, Samsung Mobile).

The vulnerability has a CVSS v3.1 vector string of CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H according to NIST's assessment, indicating local access, low complexity, low privileges required, no user interaction, and high impacts to confidentiality, integrity and availability. Samsung Mobile assessed it with a slightly different vector string of CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L (NVD).

The vulnerability allows local attackers to launch privileged activities, potentially leading to unauthorized access and execution of privileged functions within the Knox AI system (Samsung Mobile).

Samsung has addressed this vulnerability in the September 2023 Security Maintenance Release (SMR Sep-2023 Release 1). Users should update their devices to the latest available security patch level to mitigate this vulnerability (Samsung Mobile).