Lucene search

K
nvd[email protected]NVD:CVE-2022-39873
HistoryOct 07, 2022 - 3:15 p.m.

CVE-2022-39873

2022-10-0715:15:23
CWE-285
web.nvd.nist.gov
2
samsung internet
improper authorization
secret mode
unauthorized access
bookmark vulnerability

CVSS3

4.6

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS

0.001

Percentile

18.8%

Improper authorization vulnerability in Samsung Internet prior to version 18.0.4.14 allows physical attackers to add bookmarks in secret mode without user authentication.

Affected configurations

Nvd
Node
samsunginternetRange<18.0.4.14
VendorProductVersionCPE
samsunginternet*cpe:2.3:a:samsung:internet:*:*:*:*:*:*:*:*

CVSS3

4.6

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS

0.001

Percentile

18.8%

Related for NVD:CVE-2022-39873