CVE-2022-39845 MEDIUM

CVE-2022-39845

Vendor Samsung Mobile
Product Samsung Kies
Weakness CWE-354
Published September 9, 2022
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

5.5/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality None
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

What the vulnerability does

01Description

Improper validation of integrity check vulnerability in Samsung Kies prior to version 2.6.4.22074 allows local attackers to delete arbitrary directory using directory junction.

Key dates

02Disclosure timeline

September 9, 2022 CVE published
August 3, 2024 Record updated