Information disclosure

Insertion of Sensitive Information into Log in PushRegIdUpdateClient of SReminder prior to 8.2.01.13 allows attacker to access device IMEI...

PT-2022-25068 · Sreminder · Reminder

Name of the Vulnerable Software and Affected Versions: SReminder versions prior to 8.2.01.13 Description: The issue allows the insertion of sensitive information into logs, potentially enabling an attacker to access a device's IMEI. Recommendations: For versions prior to 8.2.01.13, update to...

CVE-2022-39876

CVE-2022-39876 affects Samsung SReminder’s PushRegIdUpdateClient prior to version 8.2.01.13, where the logging facility can be written with sensitive information, enabling an attacker with local access to view the device IMEI. The root cause is improper handling of sensitive data in logs within P...

SAMSUNG Mobile devices 日志信息泄露漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices version 8.2.01.13, which originates from SRminder's PushRegIdUpdateClient inserting sensitiv...

CVE-2022-39876

Insertion of Sensitive Information into Log in PushRegIdUpdateClient of SReminder prior to 8.2.01.13 allows attacker to access device IMEI...

CVE-2022-36874

Improper Handling of Insufficient Permissions or Privileges vulnerability in Waterplugin prior to 2.2.11.22040751 allows attacker to access device IMEI and Serial number...

CVE-2022-36878

Exposure of Sensitive Information in Find My Mobile prior to version 7.2.25.14 allows local attacker to access IMEI via log...

CVE-2022-36878

Exposure of Sensitive Information in Find My Mobile prior to version 7.2.25.14 allows local attacker to access IMEI via log...

Design/Logic Flaw

Improper Handling of Insufficient Permissions or Privileges vulnerability in Waterplugin prior to 2.2.11.22040751 allows attacker to access device IMEI and Serial number...

Information disclosure

Exposure of Sensitive Information in Find My Mobile prior to version 7.2.25.14 allows local attacker to access IMEI via log...

CVE-2022-36874

Waterplugin vulnerable to improper handling of insufficient permissions or privileges prior to version 2.2.11.22040751, which can allow an attacker to access device IMEI and Serial number. Affected version range is prior to 2.2.11.22040751; remediation is to update to 2.2.11.22040751 or later. No...

CVE-2022-36874

Improper Handling of Insufficient Permissions or Privileges vulnerability in Waterplugin prior to 2.2.11.22040751 allows attacker to access device IMEI and Serial number...

PT-2022-23682 · Samsung · Find My Mobile

Name of the Vulnerable Software and Affected Versions: Find My Mobile versions prior to 7.2.25.14 Description: The issue allows a local attacker to access the IMEI via log, resulting in exposure of sensitive information. Recommendations: For versions prior to 7.2.25.14, update to version 7.2.25.1...

CVE-2022-33699

CVE-2022-33699 affects Samsung TelephonyUI’s getDsaSimImsi, where IMSI can be disclosed through logs due to insufficient protection in TelephonyUI. The issue is a local disclosure vulnerability, enabling a local attacker to access IMSI data. Affected component is Samsung TelephonyUI prior to SMR ...

CVE-2021-41850

An issue was discovered in Luna Simo PPR1.180610.011/202001031830. A pre-installed app with a package name of com.skyroam.silverhelper writes three IMEI values to system properties at system startup. The system property values can be obtained via getprop by all third-party applications co-located...

Improper access control

An issue was discovered in Luna Simo PPR1.180610.011/202001031830. A pre-installed app with a package name of com.skyroam.silverhelper writes three IMEI values to system properties at system startup. The system property values can be obtained via getprop by all third-party applications co-located...

Information disclosure

An issue was discovered in Luna Simo PPR1.180610.011/202001031830. It sends the following Personally Identifiable Information PII in plaintext using HTTP to servers located in China: user's list of installed apps and device International Mobile Equipment Identity IMEI. This PII is transmitted to...

CVE-2021-41849

An issue was discovered in Luna Simo PPR1.180610.011/202001031830. It sends the following Personally Identifiable Information PII in plaintext using HTTP to servers located in China: user's list of installed apps and device International Mobile Equipment Identity IMEI. This PII is transmitted to...

CVE-2021-41849

The CVE-2021-41849 entry concerns Luna Simo PPR1.180610.011/202001031830, where PII (installed apps list, IMEI) is transmitted in plaintext over HTTP to log.skyroam.com.cn, independent of Simo usage. This is documented across multiple sources (NVD/Red Hat PRION/PR-ION PT-Security) and confirmed b...

CVE-2021-41850

CVE-2021-41850 affects Luna Simo devices (e.g., PPR1.180610.011/202001031830). A pre-installed app with package name com.skyroam.silverhelper writes three IMEI values to system properties at startup, which can be read via getprop by any co-located third-party app, even without permissions. This c...