CVE-2022-33702 MEDIUM

CVE-2022-33702

Vendor Samsung Mobile

Product Samsung Mobile Devices

Weakness CWE-285

Published July 11, 2022

Last update August 3, 2024

View on NVD All CVEs

CVSS base score

6.2/10

Attack vector Local

Attack complexity Low

Privileges required None

User interaction None

Confidentiality None

Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

What the vulnerability does

01Description

Improper authorization vulnerability in Knoxguard prior to SMR Jul-2022 Release 1 allows local attacker to disable keyguard and bypass Knoxguard lock by factory reset.

Key dates

02Disclosure timeline

July 11, 2022 CVE published

August 3, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-33702

Related vulnerabilities

04Related CVE

CVE-2021-1574 Cisco Business Process Automation Privilege Escalation Vulnerabilities CVE-2021-41313 CVE-2025-11521 Astra Security Suite – Firewall & Malware Scan <= 0.2 - Unauthenticated Arbitrary File Upload CVE-2020-3386 Cisco Data Center Network Manager Improper Authorization Vulnerability CVE-2025-12367 SiteSEO – SEO Simplified <= 1.3.1 - Missing Authorization to Authenticated (Author+) Plugin Settings Update

Identifiers

CVE CVE-2022-33702

CWE CWE-285

CVSS 6.2 / MEDIUM

Affected versions

Vendor Samsung Mobile

Product Samsung Mobile Devices

Affected ≥ Q(10), R(11), S(12) and < SMR Jul-2022 Release 1