Lucene search

[email protected]CVE-2022-39861

HistoryOct 07, 2022 - 3:15 p.m.

CVE-2022-39861

2022-10-0715:15:21

CWE-862

[email protected]

web.nvd.nist.gov

cve-2022-39861

nvd

atbroadcastreceiver

factorycamera

security vulnerability

video recording without privilege

5.9 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

4.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Unprotected Receiver in AtBroadcastReceiver in FactoryCamera prior to version 3.5.51 allows attackers to record video without camera privilege.

Affected configurations

NVD

Node

samsungfactorycameraRange<3.5.51

CPENameOperatorVersion
samsung:factorycamerasamsung factorycameralt3.5.51

CPE	Name	Operator	Version
samsung:factorycamera	samsung factorycamera	lt	3.5.51

CNA Affected

[
  {
    "vendor": "Samsung Mobile",
    "product": "FactoryCamera",
    "versions": [
      {
        "version": "unspecified",
        "status": "affected",
        "lessThan": "3.5.51",
        "versionType": "custom"
      }
    ]
  }
]

References

security.samsungmobile.com/serviceWeb.smsb?year=2022&month=10

Social References

5.9 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

4.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for CVE-2022-39861

cvelist1 nvd1 prion1