Lucene search

K
nvd[email protected]NVD:CVE-2022-39899
HistoryDec 08, 2022 - 4:15 p.m.

CVE-2022-39899

2022-12-0816:15:12
CWE-287
web.nvd.nist.gov
samsung
windowmanagerservice
authentication
input event
s pen gesture

4.3 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

0.0005 Low

EPSS

Percentile

16.2%

Improper authentication vulnerability in Samsung WindowManagerService prior to SMR Dec-2022 Release 1 allows attacker to send the input event using S Pen gesture.

Affected configurations

NVD
Node
googleandroidMatch10.0
OR
googleandroidMatch11.0
OR
googleandroidMatch12.0
OR
googleandroidMatch13.0

4.3 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:N

0.0005 Low

EPSS

Percentile

16.2%

Related for NVD:CVE-2022-39899