CVE-2022-39862 MEDIUM

CVE-2022-39862

Vendor Samsung Mobile
Product Samsung Mobile Devices
Weakness CWE-285
Published October 7, 2022
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

5.3/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity None

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

What the vulnerability does

01Description

Improper authorization in Dynamic Lockscreen prior to SMR Sep-2022 Release 1 in Android R(11) and 3.3.03.66 in Android S(12) allows unauthorized use of javascript interface api.

Key dates

02Disclosure timeline

October 7, 2022 CVE published
August 3, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2021-31384 Junos OS: SRX Series: Under a specific device configuration an attacker can access the devices J-Web management services from any interface, regardless of security settings protecting the service CVE-2022-22272 CVE-2022-34256 Adobe Commerce Improper Authorization Privilege escalation CVE-2019-1859 Cisco Small Business Switches Secure Shell Certificate Authentication Bypass Vulnerability CVE-2026-3265 go2ismail Free-CRM Security API improper authorization