CVE-2022-36877

LOW

Samsung Members < 4.3.00.11 (Global) and < 14.0.02.4 (China) - Sensitive Information Exposure in FaqSymptomCardViewModel

Title source: llm

Description

Exposure of Sensitive Information in FaqSymptomCardViewModel in Samsung Members prior to versions 4.3.00.11 in Global and 14.0.02.4 in China allows local attackers to access device identification via log.

References (1)

Core 1

Core References

Vendor Advisory x_refsource_misc

https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=09

Scores

CVSS v3 2.8

EPSS 0.0022

EPSS Percentile 12.5%

Attack Vector LOCAL

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:N/A:N

Details

CWE

CWE-200 CWE-532

Status published

Products (2)

samsung/samsung_members < 14.0.02.4

samsung/samsung_members < 4.3.00.11

Published Sep 09, 2022

Tracked Since Feb 18, 2026