Lucene search

Samsung MobileCVELIST:CVE-2022-25826

HistoryMar 08, 2022 - 1:48 p.m.

CVE-2022-25826

2022-03-0813:48:05

CWE-200

Samsung Mobile

www.cve.org

galaxy s3 plugin

information exposure

wifiap

cve-2022-25826

CVSS3

1.9

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N

AI Score

4.2

Confidence

High

EPSS

Percentile

5.1%

JSON

Information Exposure vulnerability in Galaxy S3 Plugin prior to version 2.2.03.22012751 allows attacker to access password information of connected WiFiAp in the log

CNA Affected

[
  {
    "product": "Galaxy S3 PlugIn",
    "vendor": "Samsung Mobile",
    "versions": [
      {
        "lessThan": "2.2.03.22012751",
        "status": "affected",
        "version": "-",
        "versionType": "custom"
      }
    ]
  }
]

References

security.samsungmobile.com/serviceWeb.smsb?year=2022&month=3

CVSS3

1.9

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N

AI Score

4.2

Confidence

High

EPSS

Percentile

5.1%

JSON

Related for CVELIST:CVE-2022-25826