CVE-2022-23425CWE-20

Improper input validation in Exynos baseband prior to SMR Feb-2022 Release 1 allows attackers to send arbitrary NAS signaling messages with fake base station

High · published February 11, 2022

CVSS v3.1
8.6
EPSS
0%
Percentile
34.1
In the wild
Unconfirmed
What it is

Improper input validation in Exynos baseband prior to SMR Feb-2022 Release 1 allows attackers to send arbitrary NAS signaling messages with fake base station.

The record
Technical detail
CVSS v3.1
8.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00409 · 34.1th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2022-02-11T17:40Z
EPSS history
Timeline
  • 11 FEB 17:40Z
    Improper input validation in Exynos baseband prior to SMR Feb-2022 Release 1 allows attackers to send arbitrary NAS signaling messages with fake base station
    cvelistv5