CVE-2022-30722

CVE-2022-30722 concerns an implicit intent hijacking vulnerability in Samsung Account prior to the SMR Jun-2022 Release 1. The issue allows bypassing user confirmation by exploiting hijacking of non-privileged applications, impacting Samsung Account on Samsung devices. The available documents cit...

CVE-2022-30729

CVE-2022-30729: Implicit Intent hijacking vulnerability in Samsung Settings prior to SMR Jun-2022 Release 1 enables retrieval of Wi‑Fi SSID and passwords via a malicious QR scanner. Affected component: Samsung Settings; root cause is misuse of implicit intents that can be hijacked by unprivileged...

Samsung mobile 安全漏洞

Samsung mobile is a cell phone from Samsung, South Korea. A security vulnerability exists in Samsung mobile Bluetooth SMR prior to Jun-2022 Release 1, which stems from a broadcast Intent including a BluetoothDevice object in the sendIntentSessionError function that is not appropriately constraine...

Samsung mobile 安全漏洞

Samsung Settings is a settings feature for Samsung Samsung mobile devices.An implicit intent hijacking vulnerability exists in Samsung Settings. The vulnerability stems from hijacking of unprivileged applications and can be exploited by attackers to obtain Wi-Fi SSIDs and passwords using a...

CVE-2022-30729: Improper Restriction of Communication Channel to Intended Endpoints

Implicit Intent hijacking vulnerability in Settings prior to SMR Jun-2022 Release 1 allows attackers to get Wi-Fi SSID and password via a malicious QR code scanner...

Samsung Account 安全漏洞

Samsung Account is a mobile account feature for Samsung Samsung mobile devices.An implicit intent hijacking vulnerability exists in versions prior to Samsung Account 13.2.00.6. The vulnerability stems from the email ID in Samsung Account not being properly protected. An attacker could exploit the...

PT-2022-20259

Name of the Vulnerable Software and Affected Versions Samsung Account versions prior to SMR Jun-2022 Release 1 Description The issue allows attackers to bypass user confirmation of Samsung Account through an Implicit Intent hijacking vulnerability. Recommendations For versions prior to SMR Jun-20...

Samsung Account 安全漏洞

Samsung Account is a mobile account feature for Samsung Samsung mobile devices.An implicit intent hijacking vulnerability exists in Samsung Account. The vulnerability stems from hijacking of non-privileged applications and can be exploited by attackers to bypass user confirmation of Samsung Accou...

CVE-2022-30747: Incorrect Default Permissions

PendingIntent hijacking vulnerability in Smart Things prior to 1.7.85.25 allows local attackers to access files without permission via implicit Intent...

CVE-2022-30722: Improper Authorization

Implicit Intent hijacking vulnerability in Samsung Account prior to SMR Jun-2022 Release 1 allows attackers to bypass user confirmation of Samsung Account...

PT-2022-20266

Name of the Vulnerable Software and Affected Versions Settings versions prior to SMR Jun-2022 Release 1 Description The issue allows attackers to obtain Wi-Fi SSID and password through a malicious QR code scanner by exploiting an Implicit Intent hijacking vulnerability in Settings. Recommendation...

Samsung mobile Bluetooth 安全漏洞

Samsung mobile is a cell phone from Samsung, South Korea. A security vulnerability exists in versions prior to Bluetooth SMR Jun-2022 Release 1, which stems from a broadcast Intent including a BluetoothDevice object in the activateVoiceRecognitionWithDevice function that does not appropriately...

PT-2022-20275

Name of the Vulnerable Software and Affected Versions Samsung Account versions prior to 13.2.00.6 Description The issue allows attackers to obtain an email ID through Implicit Intent hijacking. Recommendations For versions prior to 13.2.00.6, update to version 13.2.00.6 or later to resolve the...

Samsung mobile 安全漏洞

SmartThings is a powerful Samsung smart home mobile app. A PendingIntent hijacking vulnerability exists in versions prior to Samsung SmartThings 1.7.85.25. An unauthorized local attacker can exploit the vulnerability to access files via an implicit Intent...

CVE-2022-30737: Exposure of Sensitive Information to an Unauthorized Actor

Implicit Intent hijacking vulnerability in Samsung Account prior to version 13.2.00.6 allows attackers to get email ID...

CVE-2022-20116

In onEntryUpdated of OngoingCallController.kt, it is possible to launch non-exported activities due to intent redirection. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12...

CVE-2022-20116

In onEntryUpdated of OngoingCallController.kt, it is possible to launch non-exported activities due to intent redirection. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12...

Design/Logic Flaw

In onEntryUpdated of OngoingCallController.kt, it is possible to launch non-exported activities due to intent redirection. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12...

CVE-2022-20116

In onEntryUpdated of OngoingCallController.kt, it is possible to launch non-exported activities due to intent redirection. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12...

CVE-2022-20116: Undefined Security Weakness

In onEntryUpdated of OngoingCallController.kt, it is possible to launch non-exported activities due to intent redirection. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12...