CVE-2022-25816 MEDIUM

CVE-2022-25816

Vendor Samsung Mobile
Product Samsung Mobile Devices
Weakness CWE-287 · Improper authentication
Published March 8, 2022
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

4.1/10
Attack vector Physical
Attack complexity Low
Privileges required None
User interaction Required
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L

What the vulnerability does

01Description

Improper authentication in Samsung Lock and mask apps setting prior to SMR Mar-2022 Release 1 allows attacker to change enable/disable without authentication

Key dates

02Disclosure timeline

March 8, 2022 CVE published
August 3, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-12374 Email Verification, Email OTP, Block Spam Email, Passwordless login, Hide Login, Magic Login – User Verification <= 2.0.44 - Authentication Bypass to Account Takeover CVE-2025-64432 KubeVirt Affected by an Authentication Bypass in Kubernetes Aggregation Layer CVE-2026-7876 Authentication bypass vulnerability found in Aspera High-Speed Transfer Server for Cloud Pak for Integration CVE-2025-0890 CVE-2021-40851 TCMAN GIM SQL injection vulnerability