Lucene search
Samsung MobileCVELIST:CVE-2022-24931HistoryMar 08, 2022 - 1:46 p.m.
CVE-2022-24931
2022-03-0813:46:31
CWE-269
Samsung Mobile
www.cve.org
7.9 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L
0.0004 Low
EPSS
Percentile
12.6%
Improper access control vulnerability in dynamic receiver in ApkInstaller prior to SMR MAR-2022 Release allows unauthorized attackers to execute arbitrary activity without a proper permission
CNA Affected
[
{
"product": "Samsung Mobile Devices",
"vendor": "Samsung Mobile",
"versions": [
{
"lessThan": "SMR Mar-2022 Release 1 ",
"status": "affected",
"version": "Q(10), R(11)",
"versionType": "custom"
}
]
}
]Related
nvd
nvd
CVE-2022-24931
2022-03-10 17:46:56
cnvd
cnvd
Samsung ApkInstaller licensing issue vulnerability
2022-03-14 00:00:00
cve
cve
CVE-2022-24931
2022-03-10 17:46:56
prion
prion
Improper access control
2022-03-10 17:46:00
7.9 High
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L
0.0004 Low
EPSS
Percentile
12.6%
Related for CVELIST:CVE-2022-24931