Lucene search

[email protected]CVE-2022-39873

HistoryOct 07, 2022 - 3:15 p.m.

CVE-2022-39873

2022-10-0715:15:23

CWE-285

[email protected]

web.nvd.nist.gov

cve-2022-39873

samsung internet

vulnerability

improper authorization

user authentication

nvd

4.6 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

4.5 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.8%

JSON

Improper authorization vulnerability in Samsung Internet prior to version 18.0.4.14 allows physical attackers to add bookmarks in secret mode without user authentication.

Affected configurations

NVD

Node

samsunginternetRange<18.0.4.14

CPENameOperatorVersion
samsung:internetsamsung internetlt18.0.4.14

CPE	Name	Operator	Version
samsung:internet	samsung internet	lt	18.0.4.14

CNA Affected

[
  {
    "vendor": "Samsung Mobile",
    "product": "Samsung Internet",
    "versions": [
      {
        "version": "unspecified",
        "status": "affected",
        "lessThan": "18.0.4.14",
        "versionType": "custom"
      }
    ]
  }
]

References

security.samsungmobile.com/serviceWeb.smsb?year=2022&month=10

Social References

4.6 Medium

CVSS3

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

4.5 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.8%

JSON

Related for CVE-2022-39873

nvd1 cvelist1 prion1