Lucene search
Samsung MobileCVELIST:CVE-2022-33687HistoryJul 11, 2022 - 1:33 p.m.
CVE-2022-33687
2022-07-1113:33:28
CWE-200
Samsung Mobile
www.cve.org
3
cve-2022-33687
sensitive information exposure
telephony-common.jar
smr jul-2022 release
imsi access
local attackers
CVSS3
3.3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
AI Score
4.2
Confidence
High
EPSS
0
Percentile
5.1%
Exposure of Sensitive Information in telephony-common.jar prior to SMR Jul-2022 Release 1 allows local attackers to access IMSI via log.
CNA Affected
[
{
"product": "Samsung Mobile Devices",
"vendor": "Samsung Mobile",
"versions": [
{
"lessThan": "SMR Jul-2022 Release 1",
"status": "affected",
"version": "Q(10), R(11), S(12)",
"versionType": "custom"
}
]
}
]Related
nvd
nvd
CVE-2022-33687
2022-07-12 14:15:17
prion
prion
Design/Logic Flaw
2022-07-12 14:15:00
cnvd
cnvd
Samsung telephony-common.jar information disclosure vulnerability
2022-07-15 00:00:00
cve
cve
CVE-2022-33687
2022-07-12 14:15:17
CVSS3
3.3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
AI Score
4.2
Confidence
High
EPSS
0
Percentile
5.1%
Related for CVELIST:CVE-2022-33687