CVE-2022-24932
4.2
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Summary
Improper Protection of Alternate Path vulnerability in Setup wizard process prior to SMR Mar-2022 Release 1 allows physical attacker package installation before finishing Setup wizard.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Samsung Mobile | Samsung Mobile Devices | Q(10), R(11), S(12) < SMR Mar-2022 Release 1 | affected |
| Samsung Mobile | Samsung Clould | - < 5.1.0.8 | affected |
Weaknesses
- CWE-424: CWE-424: Improper Protection of Alternate Path
ADP Enrichment
CVE Program Container
Additional References
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.