CVE-2022-39845

EPSS 0.03%
Published 09.09.2022 15:15:14
Last modified 21.11.2024 07:18:22
Source mobile.security@samsung.com
Teams watchlist Login
Open Login

Improper validation of integrity check vulnerability in Samsung Kies prior to version 2.6.4.22074 allows local attackers to delete arbitrary directory using directory junction.

Affected products Warnungen 0 Metrics 3 CWE 1 References 4

Data is provided by the National Vulnerability Database (NVD)

Samsung ≫ Kies Version < 2.6.4.22074

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.03%	0.063

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.1	1.8	5.2	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
mobile.security@samsung.com	5.5	1.8	3.6	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

CWE-354 Improper Validation of Integrity Check Value

The product does not validate or incorrectly validates the integrity check values or "checksums" of a message. This may prevent it from detecting if the data has been modified or corrupted in transmission.

https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=09

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2022-39845

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2022-39845

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2022-39845

EUVD