Lucene search

K
cvelistSamsung MobileCVELIST:CVE-2022-27827
HistoryApr 11, 2022 - 7:37 p.m.

CVE-2022-27827

2022-04-1119:37:21
CWE-20
Samsung Mobile
www.cve.org
7
cve-2022-27827
improper validation
mediamonitordimension
smr apr-2022 release
attackers
security vulnerability

CVSS3

8.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L

AI Score

8.6

Confidence

High

EPSS

0

Percentile

12.6%

Improper validation vulnerability in MediaMonitorDimension prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities.

CNA Affected

[
  {
    "product": "Samsung Mobile Devices",
    "vendor": "Samsung Mobile",
    "versions": [
      {
        "lessThan": "SMR Apr-2022 Release 1",
        "status": "affected",
        "version": "O(10), R(11), S(12)",
        "versionType": "custom"
      }
    ]
  }
]

CVSS3

8.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:L

AI Score

8.6

Confidence

High

EPSS

0

Percentile

12.6%

Related for CVELIST:CVE-2022-27827