Sensitive information exposure in onCharacteristicRead in Charm by Samsung prior to version 1.2.3 allows attacker to get bluetooth connection information without permission.
oryginał ENCVSS Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NSamsung Charm
APPSamsung< 1.2.3
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Powiązane podatności
CVE-2022-33734MEDIUM6.2ten sam produkt
Sensitive information exposure in onCharacteristicChanged in Charm by Samsung prior to version 1.2.3 allows at...
CVE-2022-36829MEDIUM6.2ten sam produkt
PendingIntent hijacking vulnerability in releaseAlarm in Charm by Samsung prior to version 1.2.3 allows local ...
CVE-2022-36830MEDIUM6.2ten sam produkt
PendingIntent hijacking vulnerability in cancelAlarmManager in Charm by Samsung prior to version 1.2.3 allows ...
CVE-2022-36836MEDIUM6.2ten sam produkt
Unprotected provider vulnerability in Charm by Samsung prior to version 1.2.3 allows attackers to read connect...
CVE-2025-4632CRITICAL9.8⚠ KEVPL ✓ten sam vendor
Path Traversal w Samsung MagicINFO 9 Server — zapis plików jako SYSTEM