CVE-2022-33696

The vulnerability CVE-2022-33696 affects Samsung Telephony service on Samsung mobile devices. It permits a local attacker to access sensitive mobile identifiers (IMSI and ICCID) through logs due to an information-disclosure flaw in the Telephony service, prior to the SMR July 2022 Release 1. Impa...

CVE-2022-33693

Exposure of Sensitive Information in CID Manager prior to SMR Jul-2022 Release 1 allows local attacker to access iccid via log...

CVE-2022-33693

The vulnerability CVE-2022-33693 affects Samsung Mobile CID Manager prior to the SMR July 2022 release, allowing a local attacker to access ICCID information via logs. The issue is described as an information disclosure originating from CID Manager logging behavior, with the impact limited to con...

CVE-2022-33692

CVE-2022-33692 refers to an information-disclosure vulnerability in Samsung’s Message App on Samsung mobile devices. The available connected documents describe that prior to the SMR July 2022 Release 1, a local attacker could access IMSI and ICCID via logs produced by the Messaging application. T...

PT-2022-21801

Name of the Vulnerable Software and Affected Versions GsmAlarmManager versions prior to SMR Jul-2022 Release 1 Description The issue allows a local attacker to access sensitive information, specifically the iccid, via log exposure. Recommendations For versions prior to SMR Jul-2022 Release 1,...

PT-2022-21808

Name of the Vulnerable Software and Affected Versions Messaging application versions prior to SMR Jul-2022 Release 1 Description The issue allows a local attacker to access sensitive information, including imsi and iccid, via log exposure. Recommendations For versions prior to SMR Jul-2022 Releas...

PT-2022-21809

Name of the Vulnerable Software and Affected Versions CID Manager versions prior to SMR Jul-2022 Release 1 Description The issue allows a local attacker to access sensitive information, specifically the iccid, via log exposure in the CID Manager. This could potentially lead to unauthorized access...

PT-2022-21814

Name of the Vulnerable Software and Affected Versions Telecom application versions prior to SMR Jul-2022 Release 1 Description The issue allows local attackers to access sensitive information, specifically the ICCID, via log exposure. Recommendations For versions prior to SMR Jul-2022 Release 1,...

PT-2022-21812

Name of the Vulnerable Software and Affected Versions Telephony service versions prior to SMR Jul-2022 Release 1 Description The issue allows a local attacker to access sensitive information, including imsi and iccid, via log exposure. Recommendations For versions prior to SMR Jul-2022 Release 1,...

CVE-2022-33698: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of Sensitive Information in Telecom application prior to SMR Jul-2022 Release 1 allows local attackers to access ICCID via log...

CVE-2022-33696: Exposure of Sensitive Information Due to Incompatible Policies

Exposure of Sensitive Information in Telephony service prior to SMR Jul-2022 Release 1 allows local attacker to access imsi and iccid via log...

CVE-2022-33692: Exposure of Sensitive Information Due to Incompatible Policies

Exposure of Sensitive Information in Messaging application prior to SMR Jul-2022 Release 1 allows local attacker to access imsi and iccid via log...

CVE-2022-33686: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of Sensitive Information in GsmAlarmManager prior to SMR Jul-2022 Release 1 allows local attacker to access iccid via log...

CVE-2022-33693: Exposure of Sensitive Information to an Unauthorized Actor

Exposure of Sensitive Information in CID Manager prior to SMR Jul-2022 Release 1 allows local attacker to access iccid via log...

CVE-2022-20121

In getNodeValue of USCCDMPlugin.java, there is a possible disclosure of ICCID due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

CVE-2022-20121

In getNodeValue of USCCDMPlugin.java, there is a possible disclosure of ICCID due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

CVE-2022-20121

CVE-2022-20121 describes an information-disclosure vulnerability in Android related to the USCCDMPlugin/USCCDMService. The root cause is a missing permission check in getNodeValue of USCCDMPlugin.java, enabling local disclosure of ICCID with no extra execution privileges and without user interact...

CVE-2022-20121: Missing Authorization

In getNodeValue of USCCDMPlugin.java, there is a possible disclosure of ICCID due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

PUB-A-212573046

In getNodeValue of USCCDMPlugin.java, there is a possible disclosure of ICCID due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-183612370

In getAllSubInfoList of SubscriptionController.java, there is a possible way to retrieve a long term identifier without the correct permissions due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed...