Security Vulnerabilities - CVEs Published In June 2022
Improper privilege management vulnerability in Samsung Account prior to 13.2.00.6 allows attackers to get an user email or phone number with a normal level permission.
CVSS Score
4.0
EPSS Score
0.002
Published
2022-06-07
Improper auto-fill algorithm in Samsung Internet prior to version 17.0.1.69 allows physical attackers to guess stored credit card numbers.
CVSS Score
4.1
EPSS Score
0.001
Published
2022-06-07
Sensitive information exposure vulnerability in SimChangeAlertManger of Find My Mobile prior to 7.2.24.12 allows local attackers with log access permission to get sim card information through device log.
CVSS Score
3.3
EPSS Score
0.001
Published
2022-06-07
Sensitive information exposure vulnerability in FmmExtraOperation of Find My Mobile prior to 7.2.24.12 allows local attackers with log access permissio to get sim card information through device log.
CVSS Score
3.3
EPSS Score
0.001
Published
2022-06-07
Improper privilege management vulnerability in Samsung Account prior to 13.2.00.6 allows attackers to get the data of contact and gallery without permission.
CVSS Score
5.3
EPSS Score
0.002
Published
2022-06-07
DLL hijacking vulnerability in KiesWrapper in Samsung Kies prior to version 2.6.4.22043_1 allows attacker to execute arbitrary code.
CVSS Score
6.2
EPSS Score
0.001
Published
2022-06-07
Improper access control vulnerability in Quick Share prior to version 13.1.2.4 allows attacker to access internal files in Quick Share.
CVSS Score
4.0
EPSS Score
0.001
Published
2022-06-07
Missing caller check in Smart Things prior to version 1.7.85.12 allows attacker to access senstive information remotely using javascript interface API.
CVSS Score
7.5
EPSS Score
0.003
Published
2022-06-07
PendingIntent hijacking vulnerability in Smart Things prior to 1.7.85.25 allows local attackers to access files without permission via implicit Intent.
CVSS Score
5.5
EPSS Score
0.0
Published
2022-06-07
Unprotected dynamic receiver in Samsung Members prior to version 4.2.005 allows attacker to launch arbitrary activity.
CVSS Score
4.0
EPSS Score
0.001
Published
2022-06-07