Lucene search

Samsung MobileCVE-2022-36832

HistoryAug 05, 2022 - 4:15 p.m.

CVE-2022-36832

2022-08-0516:15:14

CWE-284

Samsung Mobile

web.nvd.nist.gov

cve-2022-36832

webapp

cameralyzer

access control

vulnerability

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

4.2

Confidence

High

EPSS

Percentile

5.1%

JSON

Improper access control vulnerability in WebApp in Cameralyzer prior to versions 3.2.22, 3.3.22, 3.4.22 and 3.5.51 allows attackers to access external storage as Cameralyzer privilege.

Affected configurations

Nvd

Node

samsungcameralyzerRange<3.2.22

samsungcameralyzerRange3.3.0–3.3.22

samsungcameralyzerRange3.4.0–3.4.22

samsungcameralyzerRange3.5.0–3.5.51

VendorProductVersionCPE
samsungcameralyzer*cpe:2.3:a:samsung:cameralyzer:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
samsung	cameralyzer	*	cpe:2.3:a:samsung:cameralyzer::::::::

CNA Affected

[
  {
    "product": "Cameralyzer",
    "vendor": "Samsung Mobile",
    "versions": [
      {
        "lessThan": "3.2.22, 3.3.22, 3.4.22 and 3.5.51",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

security.samsungmobile.com/serviceWeb.smsb?year=2022&month=08

Social References

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

4.2

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for CVE-2022-36832