Lucene search
Samsung MobileCVELIST:CVE-2022-33689HistoryJul 11, 2022 - 1:33 p.m.
CVE-2022-33689
2022-07-1113:33:44
CWE-287
Samsung Mobile
www.cve.org
6.2 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
6.5 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
12.6%
Improper access control vulnerability in TelephonyUI prior to SMR Jul-2022 Release 1 allows attackers to change preferred network type by unprotected binder call.
CNA Affected
[
{
"product": "Samsung Mobile Devices",
"vendor": "Samsung Mobile",
"versions": [
{
"lessThan": "SMR Jul-2022 Release 1",
"status": "affected",
"version": "Q(10), R(11), S(12)",
"versionType": "custom"
}
]
}
]Related
nvd
nvd
CVE-2022-33689
2022-07-12 14:15:17
cve
cve
CVE-2022-33689
2022-07-12 14:15:17
cnvd
cnvd
Samsung TelephonyUI Access Control Error Vulnerability (CNVD-2022-70745)
2022-07-15 00:00:00
prion
prion
Improper access control
2022-07-12 14:15:00
6.2 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
6.5 Medium
AI Score
Confidence
High
0.0004 Low
EPSS
Percentile
12.6%
Related for CVELIST:CVE-2022-33689