Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

12 records

Release: Samsung Mobile Devices SMR Mar-2022 Release 1 Clear all filters
TI-2022-09390 CVE-2022-25820 · GHSA-7q24-f637-m9v4

Missing brute-force protection in Samsung Mobile Devices

Priority LOW 20

A vulnerable design in fingerprint matching algorithm prior to SMR Mar-2022 Release 1 allows physical attackers to perform brute force attack on screen lock password.

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00104 Published 2022-03-08 Fixed in SMR Mar-2022 Release 1 CWE-307
TI-2022-09387 CVE-2022-25817 · GHSA-8gx7-p5wj-xqhw

Improper authentication in Samsung Mobile Devices

Priority LOW 18

Improper authentication in One UI Home prior to SMR Mar-2022 Release 1 allows attacker to generate pinned-shortcut without user consent.

CVSS 3.1MEDIUM 4.0 Local No auth No interaction EPSS 0.00106 Published 2022-03-08 Fixed in SMR Mar-2022 Release 1 CWE-287
TI-2022-09386 CVE-2022-25816 · GHSA-2f4r-9w89-phg8

Improper authentication in Samsung Mobile Devices

Priority LOW 20

Improper authentication in Samsung Lock and mask apps setting prior to SMR Mar-2022 Release 1 allows attacker to change enable/disable without authentication

CVSS 3.1MEDIUM 4.6 Physical No auth No interaction EPSS 0.00109 Published 2022-03-08 Fixed in SMR Mar-2022 Release 1 CWE-287
TI-2022-09385 CVE-2022-25815 · GHSA-7j3r-pc2m-8mq4

Incorrect default permissions in Samsung Mobile Devices

Priority LOW 33

PendingIntent hijacking vulnerability in Weather application prior to SMR Mar-2022 Release 1 allows local attackers to perform unauthorized action without permission via hijacking the PendingIntent.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.001 Published 2022-03-08 Fixed in SMR Mar-2022 Release 1 CWE-276
TI-2022-09384 CVE-2022-25814 · GHSA-7xcq-9v27-4gw8

Incorrect default permissions in Samsung Mobile Devices

Priority LOW 33

PendingIntent hijacking vulnerability in Wearable Manager Installer prior to SMR Mar-2022 Release 1 allows local attackers to perform unauthorized action without permission via hijacking the PendingIntent.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.001 Published 2022-03-08 Fixed in SMR Mar-2022 Release 1 CWE-276
TI-2022-08736 CVE-2022-24931 · GHSA-5hg7-xm7j-2ff2

Improper privilege management in Samsung Mobile Devices

Priority LOW 33

Improper access control vulnerability in dynamic receiver in ApkInstaller prior to SMR MAR-2022 Release allows unauthorized attackers to execute arbitrary activity without a proper permission

CVSS 3.1HIGH 7.9 Local Low privileges No interaction EPSS 0.00122 Published 2022-03-08 Fixed in SMR Mar-2022 Release 1 CWE-269