Read the docs
TI-2022-18839 Aliases CVE-2022-39845GHSA-5fjx-286j-pq38

Improper validation of integrity check vulnerability in Samsung Kies prior to version…

Priority LOW 30CWE-354Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

Improper validation of integrity check vulnerability in Samsung Kies prior to version 2.6.4.22074 allows local attackers to delete arbitrary directory using directory junction.

Why it matters now

EPSS 0.0013 2nd percentileScored 2026-11-07
Fix Fixed Samsung Kies (Samsung Mobile): 2.6.4.22074

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
SamsungSamsung Kiesbefore 2.6.4.220742.6.4.22074Patch availableCNA
  • Samsung Kies VendorSamsung Affected before 2.6.4.22074 Fixed in 2.6.4.22074 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:samsung:kies:*:*:*:*:*:*:*:*before 2.6.4.22074VulnerableSamsung
  • cpe:2.3:a:samsung:kies:*:*:*:*:*:*:*:* Versions before 2.6.4.22074 Vulnerable ·Samsung

Remediation

  • Fix · CNA Samsung Kies (Samsung Mobile) Fixed in 2.6.4.22074

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-39845
  2. 2026-10-03 Alias added: GHSA-5fjx-286j-pq38

References

Advisory 1

  • TI-2012-03291 Samsung Kies before 2.5.0.12094_27_11 has arbitrary file execution. CVSS 3.1CRITICAL 9.8
  • TI-2012-05176 Buffer overflow in the PrepareSync method in the SyncService.dll ActiveX control in… CVSS 2.0HIGH 10.0
  • TI-2012-02594 The MASetupCaller ActiveX control before 1.4.2012.508 in MASetupCaller.dll in MarkAny… CVSS 2.0HIGH 9.3
  • TI-2012-03294 Samsung Kies before 2.5.0.12094_27_11 has registry modification. CVSS 3.1HIGH 7.5
  • TI-2012-03293 Samsung Kies before 2.5.0.12094_27_11 has arbitrary directory modification. CVSS 3.1HIGH 7.5
  • TI-2012-03292 Samsung Kies before 2.5.0.12094_27_11 has arbitrary file modification. CVSS 3.1HIGH 7.5
See all 10 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences