CVE-2022-39858
Assigner: Samsung Mobile
Published: 2022-10-07T00:00:00
State: PUBLISHED
descriptions: value: Path traversal vulnerability in AtBroadcastReceiver in FactoryCamera prior to version 3.5.51 allows attackers to write arbitrary file as FactoryCamera privilege.
affected: vendor: Samsung Mobile
product: FactoryCamera
versions: version: unspecified
status: affected
lessThan: 3.5.51
versionType: custom
metrics: cvssV3_1: version: 3.1
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: LOW
availabilityImpact: LOW
baseScore: 7.3
baseSeverity: HIGH
problemTypes: descriptions: type: CWE
description: CWE-22: Improper Limitation of a Pathname to a Restricted Directory (&#39;Path Traversal&#39;)
cweId: CWE-22
source: discovery: UNKNOWN