Lucene search
+L

117 matches found

ATTACKERKB
ATTACKERKB
added 2022/10/07 3:15 p.m.3 views

CVE-2022-39856

Improper access control vulnerability in imsservice application prior to SMR Oct-2022 Release 1 allows local attackers to access call information...

4CVSS5.8AI score0.00116EPSS
SaveExploits0References2
OSV
OSV
added 2022/10/07 3:15 p.m.4 views

CVE-2022-39856

Improper access control vulnerability in imsservice application prior to SMR Oct-2022 Release 1 allows local attackers to access call information...

3.3CVSS5.8AI score0.00116EPSS
SaveExploits0References1
Prion
Prion
added 2022/10/07 3:15 p.m.16 views

Improper access control

Improper access control vulnerability in imsservice application prior to SMR Oct-2022 Release 1 allows local attackers to access call information...

1.7CVSS4AI score0.00116EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2022/10/07 12:0 a.m.6 views

PT-2022-25046 · Unknown · Imsservice

Name of the Vulnerable Software and Affected Versions: imsservice application prior to SMR Oct-2022 Release 1 Description: The issue is related to improper access control in the imsservice application, allowing local attackers to access call information. Recommendations: For versions prior to SMR...

4CVSS3.8AI score0.00116EPSS
SaveExploits0References3
CVE
CVE
added 2022/10/07 12:0 a.m.54 views

CVE-2022-39856

CVE-2022-39856 : Improper access control in the imsservice application prior to Samsung SMR Oct-2022 Release 1 allows local attackers to access call information. Affects the imsservice component; root cause is access control weakness enabling local disclosure. Impact is information exposure (call...

4CVSS4AI score0.00116EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2022/10/07 12:0 a.m.3 views

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Oct-2022 Release 1 version, which stems from an improper access control vulnerability in...

4CVSS5AI score0.00116EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2022/10/07 12:0 a.m.40 views

CVE-2022-39856

Improper access control vulnerability in imsservice application prior to SMR Oct-2022 Release 1 allows local attackers to access call information...

4CVSS4.5AI score0.00116EPSS
SaveExploits0References1
CNVD
CNVD
added 2022/04/13 12:0 a.m.29 views

Samsung SMR Licensing Issue Vulnerability (CNVD-2022-63637)

Samsung SMR is a system patch package from South Korea's Samsung Samsung. An authorization issue vulnerability exists in versions prior to Samsung SMR Apr-2022 Release 1, which stems from incorrect authentication in ImsService and can be exploited to obtain IMSI without READPRIVILEGEDPHONESTATE...

3.3CVSS5.5AI score0.00105EPSS
SaveExploits0References1
NVD
NVD
added 2022/04/11 8:15 p.m.25 views

CVE-2022-25833

Improper authentication in ImsService prior to SMR Apr-2022 Release 1 allows attackers to get IMSI without READPRIVILEGEDPHONESTATE permission...

3.3CVSS0.00105EPSS
SaveExploits0References1
OSV
OSV
added 2022/04/11 8:15 p.m.8 views

CVE-2022-25833

Improper authentication in ImsService prior to SMR Apr-2022 Release 1 allows attackers to get IMSI without READPRIVILEGEDPHONESTATE permission...

3.3CVSS5.8AI score0.00105EPSS
SaveExploits0References1
Prion
Prion
added 2022/04/11 8:15 p.m.15 views

Authentication flaw

Improper authentication in ImsService prior to SMR Apr-2022 Release 1 allows attackers to get IMSI without READPRIVILEGEDPHONESTATE permission...

2.1CVSS4.3AI score0.00105EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2022/04/11 7:36 p.m.81 views

CVE-2022-25833

The CVE-2022-25833 entry concerns Samsung SMR prior to Apr-2022 Release 1, where improper authentication in ImsService could allow an attacker to obtain IMSI without the READ_PRIVILEGED_PHONE_STATE permission. The vulnerability involves authentication checks in ImsService, enabling local access t...

3.3CVSS4.2AI score0.00105EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/04/11 7:36 p.m.29 views

CVE-2022-25833

Improper authentication in ImsService prior to SMR Apr-2022 Release 1 allows attackers to get IMSI without READPRIVILEGEDPHONESTATE permission...

3.3CVSS4.4AI score0.00105EPSS
SaveExploits0References1
NVD
NVD
added 2017/12/05 5:29 p.m.18 views

CVE-2017-11042

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, ImsService and the IQtiImsExt AIDL APIs are not subject to access control...

7.8CVSS7.2AI score0.00127EPSS
SaveExploits0References1
Prion
Prion
added 2017/12/05 5:29 p.m.21 views

Improper access control

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, ImsService and the IQtiImsExt AIDL APIs are not subject to access control...

4.6CVSS7.8AI score0.00127EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2017/12/05 5:0 p.m.27 views

CVE-2017-11042

In Android for MSM, Firefox OS for MSM, QRD Android, with all Android releases from CAF using the Linux kernel, ImsService and the IQtiImsExt AIDL APIs are not subject to access control...

7.3AI score0.00127EPSS
SaveExploits0References1
CVE
CVE
added 2017/12/05 5:0 p.m.63 views

CVE-2017-11042

CVE-2017-11042 affects Android for MSM, Firefox OS for MSM, and QRD Android builds with CAF Linux kernel, where ImsService and IQtiImsExt AIDL APIs lack access control. Root cause: insufficient access restrictions on these ImsService interfaces. Exploitation would be local (CVSS2/3 reflect LOCAL,...

7.8CVSS7.1AI score0.00127EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder