Lucene search

Samsung MobileCVE-2022-36837

HistoryAug 05, 2022 - 4:15 p.m.

CVE-2022-36837

2022-08-0516:15:15

CWE-285

Samsung Mobile

web.nvd.nist.gov

cve

2022

36837

intent redirection

vulnerability

samsung email

nvd

security

CVSS3

6.2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

5.4

Confidence

High

EPSS

Percentile

5.1%

JSON

Intent redirection vulnerability using implicit intent in Samsung email prior to version 6.1.70.20 allows attacker to get sensitive information.

Affected configurations

Nvd

Node

samsungsamsung_emailRange<6.1.70.20

VendorProductVersionCPE
samsungsamsung_email*cpe:2.3:a:samsung:samsung_email:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
samsung	samsung_email	*	cpe:2.3:a:samsung:samsung_email::::::::

CNA Affected

[
  {
    "product": "Samsung email",
    "vendor": "Samsung Mobile",
    "versions": [
      {
        "lessThan": "6.1.70.20",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

security.samsungmobile.com/serviceWeb.smsb?year=2022&month=08

Social References

CVSS3

6.2

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

AI Score

5.4

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for CVE-2022-36837