Samsung Reminder vulnerabilities

3 known vulnerabilities affecting samsung/reminder.

Total CVEs

3

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1MEDIUM1LOW1

Vulnerabilities

Page 1 of 1

CVE-2022-39876LOWCVSS 3.3fixed in 8.2.01.132022-10-07

CVE-2022-39876 [MEDIUM] CWE-532 CVE-2022-39876: Insertion of Sensitive Information into Log in PushRegIdUpdateClient of SReminder prior to 8.2.01.13 Insertion of Sensitive Information into Log in PushRegIdUpdateClient of SReminder prior to 8.2.01.13 allows attacker to access device IMEI.

CVE-2022-23433MEDIUMCVSS 5.3fixed in 12.3.01.3000fixed in 12.2.05.6000+1 more2022-02-11

CVE-2022-23433 [MEDIUM] CWE-284 CVE-2022-23433: Improper access control vulnerability in Reminder prior to versions 12.3.01.3000 in Android S(12), 1 Improper access control vulnerability in Reminder prior to versions 12.3.01.3000 in Android S(12), 12.2.05.6000 in Android R(11) and 11.6.08.6000 in Andoid Q(10) allows attackers to register reminders or execute exporeted activities remotely.

CVE-2022-22285HIGHCVSS 7.1fixed in 12.2.05.0fixed in 12.3.02.10002022-01-10

CVE-2022-22285 [MEDIUM] CWE-94 CVE-2022-22285: A vulnerability using PendingIntent in Reminder prior to version 12.2.05.0 in Android R(11.0) and 12 A vulnerability using PendingIntent in Reminder prior to version 12.2.05.0 in Android R(11.0) and 12.3.02.1000 in Android S(12.0) allows attackers to execute privileged action by hijacking and modifying the intent.