Command injection

2023-02-0919:15:00

PRIOn knowledge base

www.prio-n.com

improper implementation

samsung flow

android

cryptographic

decryption

messages

command injection

8.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.7%

JSON

Improper cryptographic implementation in Samsung Flow for Android prior to version 4.9.04 allows adjacent attackers to decrypt encrypted messages or inject commands.

CPENameOperatorVersion
flowlt4.9.04

CPE	Name	Operator	Version
	flow	lt	4.9.04

References

security.samsungmobile.com/serviceWeb.smsb?year=2023&month=02