CVE-2022-36840CWE-427

DLL hijacking vulnerability in Samsung Update Setup prior to version 2.2.9.50 allows attackers to execute arbitrary code

Medium · published August 5, 2022

CVSS v3.1
4.5
EPSS
0%
Percentile
8.2
In the wild
Unconfirmed
What it is

DLL hijacking vulnerability in Samsung Update Setup prior to version 2.2.9.50 allows attackers to execute arbitrary code.

The record
Technical detail
CVSS v3.1
4.5 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00190 · 8.2th percentile
Weakness
CWE-427 · Uncontrolled Search Path Element
Published
2022-08-05T15:18Z
EPSS history
Timeline
  • 05 AUG 15:18Z
    DLL hijacking vulnerability in Samsung Update Setup prior to version 2.2.9.50 allows attackers to execute arbitrary code
    cvelistv5