Lucene search

Samsung MobileCVELIST:CVE-2022-30736

HistoryJun 07, 2022 - 6:16 p.m.

CVE-2022-30736

2022-06-0718:16:30

CWE-200

Samsung Mobile

www.cve.org

samsung account

privilege management

data access

vulnerability

CVSS3

5.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

AI Score

5.6

Confidence

High

EPSS

0.001

Percentile

28.4%

JSON

Improper privilege management vulnerability in Samsung Account prior to 13.2.00.6 allows attackers to get the data of contact and gallery without permission.

CNA Affected

[
  {
    "product": "Samsung Account",
    "vendor": "Samsung Mobile",
    "versions": [
      {
        "lessThan": "13.2.00.6",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

security.samsungmobile.com/serviceWeb.smsb?year=2022&month=6