CVE-2022-39830
Severity Score
7.5
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
2
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
sign_pFwInfo in Samsung mTower through 0.3.0 has a missing check on the return value of EC_KEY_set_public_key_affine_coordinates, leading to a denial of service.
La función sign_pFwInfo en Samsung mTower versiones hasta 0.3.0, presenta una falta de comprobación en el valor de retorno de EC_KEY_set_public_key_affine_coordinates, conllevando a una denegación de servicio
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2022-09-05 CVE Reserved
- 2022-09-05 CVE Published
- 2024-04-26 EPSS Updated
- 2024-08-03 CVE Updated
- 2024-08-03 First Exploit
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
CAPEC
References (3)
| URL | Tag | Source |
|---|---|---|
| https://www.openssl.org/docs/manmaster/man3/EC_KEY_set_public_key_affine_coordinates.html | Third Party Advisory |
| URL | Date | SRC |
|---|---|---|
| https://github.com/Samsung/mTower/blob/18f4b592a8a973ce5972f4e2658ea0f6e3686284/tools/fwinfogen.c#L194 | 2024-08-03 | |
| https://github.com/Samsung/mTower/issues/77 | 2024-08-03 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|