CVE-2022-30741 — Sensitive Information Exposure in Mobile Find MY Mobile

CWE-200 — Sensitive Information ExposureCWE-532 — Log File Information Exposure3 documents3 sources
Severity
3.3LOWNVD
EPSS
0.1%
top 82.05%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Samsung Mobile Find MY MobileSamsung Find MY Mobile
Timeline
PublishedJun 7
Latest updateJun 8

Description

Sensitive information exposure vulnerability in SimChangeAlertManger of Find My Mobile prior to 7.2.24.12 allows local attackers with log access permission to get sim card information through device log.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NExploitability: 1.8 | Impact: 1.4

Affected Packages2 packages

▶NVDsamsung/find_my_mobile< 7.2.24.12
▶CVEListV5samsung_mobile/find_my_mobileunspecified — 7.2.24.12

🔴Vulnerability Details

2
GHSA
GHSA-jcpq-36rp-cxxv: Sensitive information exposure vulnerability in SimChangeAlertManger of Find My Mobile prior to 7↗2022-06-08
▶
CVEList
CVE-2022-30741: Sensitive information exposure vulnerability in SimChangeAlertManger of Find My Mobile prior to 7↗2022-06-07
▶
CVE-2022-30741 — Sensitive Information Exposure | cvebase