PT-2022-21828 · Samsung · Samsung Usb Driver

Published 2022-07-11 · Updated 2022-07-19 · CVE-2022-33711

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Samsung USB Driver Windows Installer for Mobile Phones versions prior to 1.7.56.0

Description The issue is related to improper validation of integrity checks, allowing local attackers to delete arbitrary directories using directory junctions. This can be exploited by local attackers.

Recommendations For versions prior to 1.7.56.0, update to version 1.7.56.0 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive directories to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-354

Related Identifiers

CVE-2022-33711

Affected Products

Samsung Usb Driver

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2022-33711 · Security Note
• https://security.samsungmobile.com/serviceWeb.smsb?year==2022&month=07 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-33711 · Vendor Advisory
• https://t.me/cvenotify/33389 · Telegram Post