CVE-2022-27838

CWE-284 — Improper Access ControlCWE-863 — Incorrect Authorization3 documents3 sources
Severity
7.8HIGH
EPSS
0.0%
top 87.43%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Samsung Mobile FactorycameraSamsung Factorycamera
Timeline
PublishedApr 11
Latest updateApr 12

Description

Improper access control vulnerability in FactoryCamera prior to version 2.1.96 allows attacker to access the file with system privilege.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:NExploitability: 2.5 | Impact: 5.2

Affected Packages2 packages

▶NVDsamsung/factorycamera< 2.1.96
▶CVEListV5samsung_mobile/factorycamera- — 2.1.96

🔴Vulnerability Details

2
GHSA
GHSA-g3fc-j6w6-4h4p: Improper access control vulnerability in FactoryCamera prior to version 2↗2022-04-12
▶
CVEList
CVE-2022-27838: Improper access control vulnerability in FactoryCamera prior to version 2↗2022-04-11
▶
CVE-2022-27838 (HIGH CVSS 7.8) | Improper access control vulnerabili | cvebase.io