Skip to content
OpenAdvisories
Medium · 6.5 CVE-2022-39901 EUVD-2022-42346GHSA-cgvm-v5x3-2hm9

Improper authentication in Exynos baseband prior to SMR DEC-2022 Release 1 allows remote attacker to disable the network traffic encryption…

Published Dec 8, 2022 · Updated Apr 23, 2025 · Assigned by Samsung Mobile

Description

Improper authentication in Exynos baseband prior to SMR DEC-2022 Release 1 allows remote attacker to disable the network traffic encryption between UE and gNodeB.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices Exynos baseband – < SMR Dec-2022 Release 1 SMR Dec-2022 Release 1

Advisories 1

References