VDB

CVE-2022-25817

CVE-2022-25817 PUBLISHED CVSS 4 MEDIUM

Improper authentication in One UI Home prior to SMR Mar-2022 Release 1 allows attacker to generate pinned-shortcut without user consent.

EPSS 0.11% · 1.3th percentile

Risk Scores

CVSS 3.1
4
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
EPSS Score
0.11%
1.3th percentile

Affected Products

VendorProductVersions
Samsung MobileSamsung Mobile Devices*
googleandroid10.0, 11.0

Timeline

  • Mar 8, 2022 CVE Published
  • Mar 9, 2022 EPSS Score
  • Apr 29, 2022 EPSS Score
  • Jun 20, 2022 EPSS Score
  • Aug 11, 2022 EPSS Score
  • Oct 2, 2022 EPSS Score
  • Nov 22, 2022 EPSS Score
  • Jan 13, 2023 EPSS Score
  • Mar 5, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
  • Apr 26, 2023 EPSS Score
  • Jun 16, 2023 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›