Lucene search
Samsung MobileCVELIST:CVE-2022-26090HistoryApr 11, 2022 - 7:37 p.m.
CVE-2022-26090
2022-04-1119:37:00
CWE-815
Samsung Mobile
www.cve.org
5.3 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
5.4 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
12.6%
Improper access control vulnerability in SamsungContacts prior to SMR Apr-2022 Release 1 allows that attackers can access contact information without permission.
CNA Affected
[
{
"product": "SamsungContacts",
"vendor": "Samsung Mobile",
"versions": [
{
"lessThan": "SMR Apr-2022 Release 1",
"status": "affected",
"version": "R(11), S(12)",
"versionType": "custom"
}
]
}
]Related
prion
prion
Improper access control
2022-04-11 20:15:00
cve
cve
CVE-2022-26090
2022-04-11 20:15:20
cnvd
cnvd
Samsung SMR Access Control Error Vulnerability (CNVD-2022-63648)
2022-04-13 00:00:00
nvd
nvd
CVE-2022-26090
2022-04-11 20:15:20
5.3 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
5.4 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
12.6%
Related for CVELIST:CVE-2022-26090