CVE-2022-23433

MEDIUM

Samsung Reminder < 12.3.01.3000 - Improper Access Control

Title source: llm

Description

Improper access control vulnerability in Reminder prior to versions 12.3.01.3000 in Android S(12), 12.2.05.6000 in Android R(11) and 11.6.08.6000 in Andoid Q(10) allows attackers to register reminders or execute exporeted activities remotely.

References (1)

Core 1

Core References

Vendor Advisory x_refsource_misc

https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=2

Scores

CVSS v3 4.3

EPSS 0.0023

EPSS Percentile 46.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Details

CWE

CWE-284

Status published

Products (1)

samsung/reminder < 12.3.01.3000

Published Feb 11, 2022

Tracked Since Feb 18, 2026