CVE-2022-1230

Katalog CVE

CVSS 3.9 · Low EPSS 0,36%

Kerentanan URL Redirection to Untrusted Site ('Open Redirect') pada samsung galaxy s21 firmware. Skor CVSS 3.1 3.9 (Low) menurut NVD.

Deskripsi (NVD)

This vulnerability allows local attackers to execute arbitrary code on affected installations of Samsung Galaxy S21 prior to 4.5.40.5 phones. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of redirections. An attacker can force a redirection to a site that serves malicious content. An attacker can leverage this in conjunction with other vulnerabilities to escalate privileges and execute arbitrary code in the context of the current user. Was ZDI-CAN-15918.

Rincian

Terbit di NVD

28 Maret 2023

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

3.9 (Low), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-601: URL Redirection to Untrusted Site ('Open Redirect')

EPSS (30 hari)

0,36% peluang dieksploitasi; lebih tinggi dari 27,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://security.samsungmobile.com/serviceWeb.smsb advisory vendor
• https://www.zerodayinitiative.com/advisories/ZDI-22-621/ advisory pihak ketiga · vdb entry