CVE-2022-36874 in Waterplugin

Riassunto

di MITRE • 09/09/2022

Improper Handling of Insufficient Permissions or Privileges vulnerability in Waterplugin prior to 2.2.11.22040751 allows attacker to access device IMEI and Serial number.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• Responsabile: Samsung Mobile
• Prenotare: 27/07/2022
• Divulgazione: 09/09/2022
• Moderazione: accettato
• Voce: VDB-208248
• CPE: pronto
• CWE: CWE-280 (confermato)
• CVSS: 6.2 (NVD)
• EPSS: 0.00191
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-36874
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-36874
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-36874/