VDB

CVE-2022-36856

CVE-2022-36856 PUBLISHED CVSS 4 MEDIUM

Improper access control vulnerability in Telecom application prior to SMR Sep-2022 Release 1 allows attacker to start emergency calls via undefined permission.

EPSS 0.09% · 0.5th percentile

Risk Scores

CVSS 3.1
4
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
EPSS Score
0.09%
0.5th percentile

Affected Products

VendorProductVersions
googleandroid12.0
Samsung MobileSamsung Mobile DevicesS(12)

Timeline

  • Sep 9, 2022 CVE Published
  • Sep 10, 2022 EPSS Score
  • Oct 25, 2022 EPSS Score
  • Dec 9, 2022 EPSS Score
  • Jan 24, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
  • Mar 10, 2023 EPSS Score
  • Apr 24, 2023 EPSS Score
  • Jun 8, 2023 EPSS Score
  • Jul 23, 2023 EPSS Score
  • Sep 6, 2023 EPSS Score
  • Oct 22, 2023 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›