Authentication flaw

2022-04-1120:15:00

PRIOn knowledge base

www.prio-n.com

4.3 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

12.6%

Improper authentication in ImsService prior to SMR Apr-2022 Release 1 allows attackers to get IMSI without READ_PRIVILEGED_PHONE_STATE permission.

CPENameOperatorVersion
androideq10.0
androideq11.0

CPE	Name	Operator	Version
	android	eq	10.0
	android	eq	11.0

References

security.samsungmobile.com/securityUpdate.smsb?year=2022&month=4