Skip to content
OpenAdvisories
Medium · 4.0 CVE-2022-25817 EUVD-2022-30457GHSA-8gx7-p5wj-xqhw

Improper authentication in One UI Home prior to SMR Mar-2022 Release 1 allows attacker to generate pinned-shortcut without user consent.

Published Mar 8, 2022 · Updated Aug 3, 2024 · Assigned by Samsung Mobile

Vendor: Samsung Mobile Product: Samsung Mobile Devices

Description

Improper authentication in One UI Home prior to SMR Mar-2022 Release 1 allows attacker to generate pinned-shortcut without user consent.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices Q(10), R(11) – < SMR Mar-2022 Release 1 SMR Mar-2022 Release 1

References