Lucene search
Samsung MobileCVELIST:CVE-2022-25833HistoryApr 11, 2022 - 7:36 p.m.
CVE-2022-25833
2022-04-1119:36:59
CWE-287
Samsung Mobile
www.cve.org
3.3 Low
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
4.4 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
12.6%
Improper authentication in ImsService prior to SMR Apr-2022 Release 1 allows attackers to get IMSI without READ_PRIVILEGED_PHONE_STATE permission.
CNA Affected
[
{
"product": "Samsung Mobile Devices",
"vendor": "Samsung Mobile",
"versions": [
{
"lessThan": "SMR Apr-2022 Release 1",
"status": "affected",
"version": "Q(10), R(11)",
"versionType": "custom"
}
]
}
]Related
cnvd
cnvd
Samsung SMR Licensing Issue Vulnerability (CNVD-2022-63637)
2022-04-13 00:00:00
nvd
nvd
CVE-2022-25833
2022-04-11 20:15:20
cve
cve
CVE-2022-25833
2022-04-11 20:15:20
prion
prion
Authentication flaw
2022-04-11 20:15:00
3.3 Low
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
4.4 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
12.6%
Related for CVELIST:CVE-2022-25833