Samsung Mobile Reminder vulnerabilities

3 known vulnerabilities affecting samsung_mobile/reminder.

Total CVEs

3

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1MEDIUM1LOW1

Vulnerabilities

Page 1 of 1

CVE-2022-39876LOWCVSS 3.3≥ unspecified, < 8.2.01.132022-10-07

CVE-2022-39876 [LOW] CWE-532 CVE-2022-39876: Insertion of Sensitive Information into Log in PushRegIdUpdateClient of SReminder prior to 8.2.01.13 Insertion of Sensitive Information into Log in PushRegIdUpdateClient of SReminder prior to 8.2.01.13 allows attacker to access device IMEI.

CVE-2022-23433MEDIUMCVSS 5.3≥ -, < 12.3.01.3000 in Android S(12), 12.2.05.6000 in Android R(11) and 11.6.08.6000 in Andoid Q(10)2022-02-11

CVE-2022-23433 [MEDIUM] CWE-284 CVE-2022-23433: Improper access control vulnerability in Reminder prior to versions 12.3.01.3000 in Android S(12), 1 Improper access control vulnerability in Reminder prior to versions 12.3.01.3000 in Android S(12), 12.2.05.6000 in Android R(11) and 11.6.08.6000 in Andoid Q(10) allows attackers to register reminders or execute exporeted activities remotely.

CVE-2022-22285HIGHCVSS 7.1≥ -, < 12.2.05.0 in Android R(11.0) and 12.3.02.1000 in Android S(12.0)2022-01-10

CVE-2022-22285 [HIGH] CWE-94 CVE-2022-22285: A vulnerability using PendingIntent in Reminder prior to version 12.2.05.0 in Android R(11.0) and 12 A vulnerability using PendingIntent in Reminder prior to version 12.2.05.0 in Android R(11.0) and 12.3.02.1000 in Android S(12.0) allows attackers to execute privileged action by hijacking and modifying the intent.