Lucene search
Samsung MobileCVELIST:CVE-2022-27840HistoryApr 11, 2022 - 7:37 p.m.
CVE-2022-27840
2022-04-1119:37:32
CWE-269
Samsung Mobile
www.cve.org
4.4 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
5 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
Improper access control vulnerability in SamsungRecovery prior to version 8.1.43.0 allows local attckers to delete arbitrary files as SamsungRecovery permission.
CNA Affected
[
{
"product": "Samsung Recovery",
"vendor": "Samsung Mobile",
"versions": [
{
"lessThan": "8.1.43.0 ",
"status": "affected",
"version": "-",
"versionType": "custom"
}
]
}
]Related
prion
prion
Improper access control
2022-04-11 20:15:00
cnvd
cnvd
Samsung Recovery Access Control Error Vulnerability
2022-04-13 00:00:00
cve
cve
CVE-2022-27840
2022-04-11 20:15:23
nvd
nvd
CVE-2022-27840
2022-04-11 20:15:23
4.4 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
5 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
5.1%
Related for CVELIST:CVE-2022-27840