Lucene search

K
cvelistSamsung MobileCVELIST:CVE-2022-24927
HistoryFeb 11, 2022 - 5:40 p.m.

CVE-2022-24927

2022-02-1117:40:26
CWE-269
Samsung Mobile
www.cve.org
7
samsung video player
privilege management
vulnerability
execute video files
permission

CVSS3

4.2

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L

AI Score

9.8

Confidence

High

EPSS

0.002

Percentile

54.8%

Improper privilege management vulnerability in Samsung Video Player prior to version 7.3.15.30 allows attackers to execute video files without permission.

CNA Affected

[
  {
    "product": "Samsung Video Player",
    "vendor": "Samsung Mobile",
    "versions": [
      {
        "lessThan": "7.3.15.30",
        "status": "affected",
        "version": "-",
        "versionType": "custom"
      }
    ]
  }
]

CVSS3

4.2

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L

AI Score

9.8

Confidence

High

EPSS

0.002

Percentile

54.8%

Related for CVELIST:CVE-2022-24927