Lucene search

Samsung MobileCVE-2022-33712

HistoryJul 12, 2022 - 2:15 p.m.

CVE-2022-33712

2022-07-1214:15:18

CWE-285

CWE-601

Samsung Mobile

web.nvd.nist.gov

cve-2022-33712

intent redirection

camera

android

vulnerability

implict intent

sensitive information

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

5.1

Confidence

High

EPSS

0.001

Percentile

39.1%

JSON

Intent redirection vulnerability using implict intent in Camera prior to versions 12.0.01.64 ,12.0.3.23, 12.0.0.98, 12.0.6.11, 12.0.3.19 in Android S(12) allows attacker to get sensitive information.

Affected configurations

Nvd

Node

samsungcameraRange<12.0.0.98

samsungcameraRange12.0.01.0–12.0.01.64

samsungcameraRange12.0.3.0–12.0.3.19

samsungcameraRange12.0.3.19–12.0.3.23

samsungcameraRange12.0.6.0–12.0.6.11

AND

googleandroidMatch12.0

VendorProductVersionCPE
samsungcamera*cpe:2.3:a:samsung:camera:*:*:*:*:*:*:*:*
googleandroid12.0cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
samsung	camera	*	cpe:2.3:a:samsung:camera::::::::
google	android	12.0	cpe:2.3:o:google:android:12.0:::::::*

CNA Affected

[
  {
    "product": "Camera",
    "vendor": "Samsung Mobile",
    "versions": [
      {
        "lessThan": "12.0.01.64 ,12.0.3.23, 12.0.0.98, 12.0.6.11, 12.0.3.19 in Android S(12)",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

security.samsungmobile.com/serviceWeb.smsb?year==2022&month=07

Social References

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

5.1

Confidence

High

EPSS

0.001

Percentile

39.1%

JSON

Related for CVE-2022-33712