Shodan
Maps
Images
Monitor
Developer
More...
Dashboard
View Api Docs
Vulnerabilities
By Date
Known Exploited
Advanced Search
Vulnerable Software
Vendors
Products
Vulnerability Details CVE-2022-39828
sign_pFwInfo in Samsung mTower through 0.3.0 has a missing check on the return value of EC_KEY_set_private_key, leading to a denial of service.
Exploit prediction scoring system (EPSS) score
EPSS Score
0.001
EPSS Ranking
32.5%
CVSS Severity
CVSS v3 Score
7.5
References
https://github.com/Samsung/mTower/blob/18f4b592a8a973ce5972f4e2658ea0f6e3686284/tools/fwinfogen.c#L193
https://github.com/Samsung/mTower/issues/76
https://www.openssl.org/docs/manmaster/man3/EC_KEY_set_private_key.html
https://github.com/Samsung/mTower/blob/18f4b592a8a973ce5972f4e2658ea0f6e3686284/tools/fwinfogen.c#L193
https://github.com/Samsung/mTower/issues/76
https://www.openssl.org/docs/manmaster/man3/EC_KEY_set_private_key.html
Products affected by CVE-2022-39828
Samsung
»
Mtower
»
Version:
0.1.0
cpe:2.3:a:samsung:mtower:0.1.0
Samsung
»
Mtower
»
Version:
0.2.0
cpe:2.3:a:samsung:mtower:0.2.0
Samsung
»
Mtower
»
Version:
0.3.0
cpe:2.3:a:samsung:mtower:0.3.0
Products
Monitor
Search Engine
Developer API
Maps
Bulk Data
Images
Snippets
Pricing
Membership
API Subscriptions
Enterprise
Contact Us
support@shodan.io
Shodan ® - All rights reserved