CVE-2022-28793
Assigner: Samsung Mobile
Published: 2022-05-03T19:44:08
State: PUBLISHED
affected: product: Samsung Mobile Devices
vendor: Samsung Mobile
versions: lessThan: Galaxy S22
status: affected
version: -
versionType: custom
descriptions: value: Given the TEE is compromised and controlled by the attacker, improper state maintenance in StrongBox allows attackers to change Android ROT during device boot cycle after compromising TEE. The patch is applied in Galaxy S22 to prevent change of Android ROT after first initialization at boot time.
metrics: cvssV3_1: attackComplexity: LOW
attackVector: LOCAL
availabilityImpact: NONE
baseScore: 4.4
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: HIGH
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N
version: 3.1
problemTypes: descriptions: cweId: CWE-754
description: CWE-754 Improper Check for Unusual or Exceptional Conditions
type: CWE
source: discovery: UNKNOWN