« Volver al listado

CVE-2022-33712

Estado: ModificadaMedia (5.3)—

Intent redirection vulnerability using implict intent in Camera prior to versions 12.0.01.64 ,12.0.3.23, 12.0.0.98, 12.0.6.11, 12.0.3.19 in Android S(12) allows attacker to get sensitive information.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Samsung — Camera

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2022-33712",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 5.3,
          "attackVector": "NETWORK",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N",
          "integrityImpact": "NONE",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "LOW"
        },
        "impactScore": 1.4,
        "exploitabilityScore": 3.9
      }
    ]
  },
  "affected": [
    {
      "source": "mobile.security@samsung.com",
      "affectedData": [
        {
          "vendor": "Samsung Mobile",
          "product": "Camera",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified",
              "lessThan": "12.0.01.64 ,12.0.3.23, 12.0.0.98, 12.0.6.11, 12.0.3.19 in Android S(12)",
              "versionType": "custom"
            }
          ]
        }
      ]
    }
  ],
  "published": "2022-07-12T14:15:18.500",
  "references": [
    {
      "url": "https://security.samsungmobile.com/serviceWeb.smsb?year==2022&month=07",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "mobile.security@samsung.com"
    },
    {
      "url": "https://security.samsungmobile.com/serviceWeb.smsb?year==2022&month=07",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "mobile.security@samsung.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-285"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-601"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Intent redirection vulnerability using implict intent in Camera prior to versions 12.0.01.64 ,12.0.3.23, 12.0.0.98, 12.0.6.11, 12.0.3.19 in Android S(12) allows attacker to get sensitive information."
    },
    {
      "lang": "es",
      "value": "Una vulnerabilidad de redireccionamiento de intención usando intención implícita en Camera versiones anteriores a 12.0.01.64 ,12.0.3.23, 12.0.0.98, 12.0.6.11, 12.0.3.19 en Android S(12) permite a un atacante conseguir información confidencial"
    }
  ],
  "lastModified": "2026-06-17T04:49:18.210",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:samsung:camera:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5406FBBC-CDBD-45ED-8744-AC1F14EE266B",
              "versionEndExcluding": "12.0.0.98"
            },
            {
              "criteria": "cpe:2.3:a:samsung:camera:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "001304A1-C83D-4913-8832-A82FA0E3C20D",
              "versionEndExcluding": "12.0.01.64",
              "versionStartExcluding": "12.0.01.0"
            },
            {
              "criteria": "cpe:2.3:a:samsung:camera:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "67B0C844-DDE7-4082-AB13-2FB8EA91384F",
              "versionEndExcluding": "12.0.3.19",
              "versionStartExcluding": "12.0.3.0"
            },
            {
              "criteria": "cpe:2.3:a:samsung:camera:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2FE48B3B-1747-4F40-8622-8A9D3180B700",
              "versionEndExcluding": "12.0.3.23",
              "versionStartExcluding": "12.0.3.19"
            },
            {
              "criteria": "cpe:2.3:a:samsung:camera:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9A5C8D91-643C-40B2-9C05-1F3DE05B25CF",
              "versionEndExcluding": "12.0.6.11",
              "versionStartExcluding": "12.0.6.0"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "F8FB8EE9-FC56-4D5E-AE55-A5967634740C"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "mobile.security@samsung.com"
}