6 matches found
CVE-2023-53970: Missing Authentication for Critical Function
Screen SFT DAB 600/C Firmware 1.9.3 contains a weak session management vulnerability that allows attackers to bypass authentication controls by reusing IP-bound session identifiers. Attackers can exploit the vulnerable deviceManagement API endpoint to reset device configurations by sending crafte...
CVE-2022-39885
Improper access control vulnerability in BootCompletedReceiverCMCC in DeviceManagement prior to SMR Nov-2022 Release 1 allows local attacker to access to Device information...
CVE-2022-39885
Improper access control vulnerability in BootCompletedReceiverCMCC in DeviceManagement prior to SMR Nov-2022 Release 1 allows local attacker to access to Device information...
CVE-2022-39885
Improper access control vulnerability in BootCompletedReceiverCMCC in DeviceManagement prior to SMR Nov-2022 Release 1 allows local attacker to access to Device information...
CVE-2022-39885
CVE-2022-39885 affects Samsung DeviceManagement, BootCompletedReceiver_CMCC component, prior to SMR Nov-2022 Release 1. Root cause: improper access control allowing a local attacker to access device information via the BootCompletedReceiver_CMCC in DeviceManagement. Impact: local disclosure of de...
CVE-2022-39885: Improper Handling of Insufficient Permissions or Privileges
Improper access control vulnerability in BootCompletedReceiverCMCC in DeviceManagement prior to SMR Nov-2022 Release 1 allows local attacker to access to Device information...