CVE-2022-24932

Medium

Improper Protection of Alternate Path vulnerability in Setup wizard process prior to SMR Mar-2022 Release 1 allows physical attacker…

Samsung Mobile·CWE-424·Published 2022-03-08

CVSS

4.6

EPSS

0.00

KEV

Exploits

cve.orgen

184 chars

Improper Protection of Alternate Path vulnerability in Setup wizard process prior to SMR Mar-2022 Release 1 allows physical attacker package installation before finishing Setup wizard.

NVDen

184 chars

Improper Protection of Alternate Path vulnerability in Setup wizard process prior to SMR Mar-2022 Release 1 allows physical attacker package installation before finishing Setup wizard.

Una vulnerabilidad de Protección Inapropiada de la Ruta Alternativa en el proceso del Asistente de Instalación versiones anteriores a 1 de SMR Mar-2022, permite una instalación de paquetes de atacantes físicos antes de finalizar el asistente de Instalación

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	2.1	3.9	2.9	AV:L/AC:L/Au:N/C:N/I:P/A:N
3.1	Primary	NVD	4.6	0.9	3.6	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
3.1	Primary	cve.org	4.2	—	—	CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
3.1	Primary	cve.org	4.2	—	—	CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
3.1	Secondary	NVD	4.2	0.5	3.6	CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N