CVE-2022-25816CWE-287

Improper authentication in Samsung Lock and mask apps setting prior to SMR Mar-2022 Release 1 allows attacker to change enable/disable without authentication

Medium · published March 8, 2022

CVSS v3.1
4.1
EPSS
0%
Percentile
1.2
In the wild
Unconfirmed
What it is

Improper authentication in Samsung Lock and mask apps setting prior to SMR Mar-2022 Release 1 allows attacker to change enable/disable without authentication

The record
Technical detail
CVSS v3.1
4.1 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00109 · 1.2th percentile
Weakness
CWE-287 · Improper Authentication
Published
2022-03-08T13:46Z
EPSS history
Timeline
  • 08 MAR 13:46Z
    Improper authentication in Samsung Lock and mask apps setting prior to SMR Mar-2022 Release 1 allows attacker to change enable/disable without authentication
    cvelistv5