CVE-2022-39873

CWE-285 CWE-863 — Incorrect Authorization3 documents3 sources

Severity

4.6MEDIUM

EPSS

0.1%

top 76.76%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Samsung Mobile Samsung Internet Samsung Internet

Timeline

PublishedOct 7

Description

Improper authorization vulnerability in Samsung Internet prior to version 18.0.4.14 allows physical attackers to add bookmarks in secret mode without user authentication.

CVSS vector

CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 0.7 | Impact: 3.6

Affected Packages2 packages

▶NVDsamsung/internet< 18.0.4.14

▶CVEListV5samsung_mobile/samsung_internetunspecified — 18.0.4.14

🔴Vulnerability Details

GHSA

GHSA-f6v3-x585-9mf5: Improper authorization vulnerability in Samsung Internet prior to version 18↗2022-10-07

▶

CVEList

CVE-2022-39873: Improper authorization vulnerability in Samsung Internet prior to version 18↗2022-10-07

▶