Vulnerability Details CVE-2022-28777
Improper access control vulnerability in Samsung Members prior to version 13.6.08.5 allows local attacker to execute call function without CALL_PHONE permission.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 18.7%
CVSS Severity
CVSS v3 Score 4.3
CVSS v2 Score 2.1
Products affected by CVE-2022-28777
-
cpe:2.3:a:samsung:members:-
-
cpe:2.3:a:samsung:members:2.4.81.13
-
cpe:2.3:a:samsung:members:2.4.85.11
-
cpe:2.3:a:samsung:members:3.8.00.13
-
cpe:2.3:a:samsung:members:3.9.10.11
-
cpe:2.3:a:samsung:members:4.2.005