PT-2022-25102
CVE-2022-39909
·
تاريخ النشر
2022-12-08
·
تاريخ التحديث
2022-12-12
الوصف من
CVSS 3.1
7.1
عاليةالمقاييسAV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Samsung Gear IconX PC Manager versions prior to 2.1.221019.51
Description
The issue is related to insufficient verification of data authenticity, allowing local attackers to create arbitrary files using symbolic links. This can be exploited by attackers to potentially cause harm.
Recommendations
For versions prior to 2.1.221019.51, update to version 2.1.221019.51 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive files and directories to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾