Lucene search
Samsung MobileCVELIST:CVE-2022-30753HistoryJul 11, 2022 - 1:32 p.m.
CVE-2022-30753
2022-07-1113:32:04
CWE-200
Samsung Mobile
www.cve.org
5
improper use
unique device id
secsoterservice
local attackers
obtain device id
without permission
CVSS3
3.3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
AI Score
4.1
Confidence
High
EPSS
0
Percentile
5.1%
Improper use of a unique device ID in unprotected SecSoterService prior to SMR Jul-2022 Release 1 allows local attackers to get the device ID without permission.
CNA Affected
[
{
"product": "Samsung Mobile Devices",
"vendor": "Samsung Mobile",
"versions": [
{
"lessThan": "SMR Jul-2022 Release 1",
"status": "affected",
"version": "Q(10), R(11), S(12)",
"versionType": "custom"
}
]
}
]Related
cve
cve
CVE-2022-30753
2022-07-12 14:15:16
nvd
nvd
CVE-2022-30753
2022-07-12 14:15:16
prion
prion
Input validation
2022-07-12 14:15:00
cnvd
cnvd
Samsung SecSoterService information disclosure vulnerability
2022-07-15 00:00:00
CVSS3
3.3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
AI Score
4.1
Confidence
High
EPSS
0
Percentile
5.1%
Related for CVELIST:CVE-2022-30753