CVE-2022-39877

MEDIUM

Samsung Group Sharing < 13.0.6.15 - Improper Access Control in ProfileSharingAccount

Title source: llm
STIX 2.1

Description

Improper access control vulnerability in ProfileSharingAccount in Group Sharing prior to versions 13.0.6.15 in Android S(12), 13.0.6.14 in Android R(11) and below allows attackers to identify the device.

References (1)

Core 1

Scores

CVSS v3 4.0
EPSS 0.0018
EPSS Percentile 39.7%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-284
Status published
Products (1)
samsung/group_sharing < 13.0.6.15
Published Oct 07, 2022
Tracked Since Feb 18, 2026