Skip to content
Sign in
CVE-2022-12303.9LowCWE-601

CVE-2022-1230: Samsung Galaxy S21 vulnerability

Samsung · Galaxy S21

Affected: Samsung Galaxy S21 · Exploitation: unlikely (under 1%)

Not in CyberSIXT coverage yet: no article names this CVE. This page shows the public record.

0.4%probability of exploitation in the next 30 days
29th percentile
050100

Higher than 29% of scored CVEs

3.9LowCVSS 3.0
Low

DescriptionCVE.org

This vulnerability allows local attackers to execute arbitrary code on affected installations of Samsung Galaxy S21 prior to 4.5.40.5 phones. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the handling of redirections. An attacker can force a redirection to a site that serves malicious content. An attacker can leverage this in conjunction with other vulnerabilities to escalate privileges and execute arbitrary code in the context of the current user. Was ZDI-CAN-15918.

Affected products1

From the CVE record. A product or version that is not listed is unknown, not unaffected.

  • Samsung · Galaxy S21prior to 4.5.40.5

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas
Exploitation
Unlikely (under 1%). EPSS under 1%, or no score yet.
CISA KEV
Not listed
Public check
No public nuclei template
Vendor
Samsung
Published
March 2023

CoverageNo articles yet

No CyberSIXT article names CVE-2022-1230 yet, so there is no coverage timeline, action brief or change log for it. Everything on this page comes from the public CVE record, CISA KEV, EPSS and the nuclei template index. Search the archive or see the CVEs in the news.

References

Updated AboutDevelopersSign in