[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fI5QfTOd5QcdvZuCESeR7iK3YiNDqM0hrmpcmSSJZ5O0":3,"g5a-risk:CVE-2022-39902":111},{"success":4,"data":5,"meta":108},true,{"cveId":6,"title":7,"description":8,"shortDescription":8,"publishedDate":9,"lastModified":10,"cvssScore":11,"cvssVector":12,"cvssMetrics":13,"epssScore":37,"epssPercentile":25,"epssTimeSeries":38,"severity":39,"affectedProducts":40,"affectedProductsCount":49,"references":50,"referencesCount":56,"weaknesses":57,"weaknessesCount":56,"isActivelyExploited":66,"cisaInfo":25,"otxData":25,"relatedBlogPosts":67,"seoMetadata":68,"configurations":93,"relatedVendorCves":106,"notableEvents":107},"CVE-2022-39902","What is CVE-2022-39902?","Improper authorization in Exynos baseband prior to SMR DEC-2022 Release 1 allows remote attacker to get sensitive information including IMEI via emergency call.","2022-12-08T16:15:12.34","2023-06-27T16:30:04.827",7.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":14,"CVSSMetricV30":25,"CVSSMetricV2":25,"CVSSMetricV40":25},[15,28],{"Source":16,"Type":17,"CVSSData":18,"ExploitabilityScore":26,"ImpactScore":27},"nvd@nist.gov","Primary",{"Version":19,"VectorString":12,"AttackVector":20,"AttackComplexity":21,"PrivilegesRequired":22,"UserInteraction":22,"Scope":23,"ConfidentialityImpact":24,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":11,"BaseSeverity":24,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":22,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"3.1","NETWORK","LOW","NONE","UNCHANGED","HIGH",null,3.9,3.6,{"Source":29,"Type":30,"CVSSData":31,"ExploitabilityScore":36,"ImpactScore":27},"mobile.security@samsung.com","Secondary",{"Version":19,"VectorString":32,"AttackVector":33,"AttackComplexity":21,"PrivilegesRequired":22,"UserInteraction":22,"Scope":23,"ConfidentialityImpact":24,"IntegrityImpact":22,"AvailabilityImpact":22,"BaseScore":34,"BaseSeverity":35,"ExploitCodeMaturity":25,"RemediationLevel":25,"ReportConfidence":25,"TemporalScore":25,"TemporalSeverity":25,"ConfidentialityRequirement":25,"IntegrityRequirement":25,"AvailabilityRequirement":22,"ModifiedAttackVector":25,"ModifiedAttackComplexity":25,"ModifiedPrivilegesRequired":25,"ModifiedUserInteraction":25,"ModifiedScope":25,"ModifiedConfidentialityImpact":25,"ModifiedIntegrityImpact":25,"ModifiedAvailabilityImpact":25,"EnvironmentalScore":25,"EnvironmentalSeverity":25},"CVSS:3.1\u002FAV:A\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N","ADJACENT_NETWORK",6.5,"MEDIUM",2.8,0.00828,[37,37,37,37,37,37,37],"High",[41,46],{"vendor":42,"product":43,"version":44,"criteria":45,"vulnerable":4},"samsung","exynos_firmware","-","cpe:2.3:o:samsung:exynos_firmware:-:*:*:*:*:*:*:*",{"vendor":42,"product":47,"version":44,"criteria":48,"vulnerable":4},"exynos","cpe:2.3:h:samsung:exynos:-:*:*:*:*:*:*:*",2,[51],{"url":52,"source":53,"tags":54},"https:\u002F\u002Fsecurity.samsungmobile.com\u002FsecurityUpdate.smsb?year=2022&month=12","Samsungmobile",[55],"Vendor Advisory",1,[58],{"id":59,"name":60,"description":61,"extendedDescription":62,"status":63,"abstraction":64,"structure":65},"CWE-285","Improper Authorization","The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.","Assuming a user with a given identity, authorization is the process of determining whether that user can access a given resource, based on the user's privileges and any permissions or other access-control specifications that apply to the resource.\nWhen access control checks are not applied consistently - or not at all - users are able to access data or perform actions that they should not be allowed to perform. This can lead to a wide range of problems, including information exposures, denial of service, and arbitrary code execution.","Draft","Class","Simple",false,[],{"title":69,"metaDescription":70,"keywords":71,"canonicalUrl":72,"structuredData":73},"What is CVE-2022-39902? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2022-39902, a high severity cyber security vulnerability from 2022. Improper authorization in Exynos baseband prior to SMR DEC-...","CVE-2022-39902, CVE-2022-39902 vulnerability, CVE-2022-39902 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, samsung security, exynos_firmware vulnerability, exynos vulnerability","\u002Fwhat-is\u002Fcve-2022-39902",{"@context":74,"@type":75,"headline":69,"description":70,"datePublished":9,"dateModified":10,"author":76,"publisher":80,"about":84,"mainEntityOfPage":88,"articleSection":91,"keywords":92},"https:\u002F\u002Fschema.org","TechArticle",{"@type":77,"name":78,"url":79},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":77,"name":78,"url":79,"logo":81},{"@type":82,"url":83},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":85,"name":6,"description":86,"additionalType":87},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":89,"@id":90},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2022-39902","Cybersecurity","CVE-2022-39902, CVE-2022-39902 vulnerability, CVE-2022-39902 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[94],{"Operator":95,"Negate":25,"Nodes":96},"AND",[97,102],{"Operator":98,"Negate":25,"CPEMatch":99},"OR",[100],{"Vulnerable":4,"Criteria":45,"MatchCriteriaID":101,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"0CFC5A98-2B10-4074-A505-ECD84EA1041B",{"Operator":98,"Negate":25,"CPEMatch":103},[104],{"Vulnerable":25,"Criteria":48,"MatchCriteriaID":105,"VersionStartExcluding":25,"VersionStartIncluding":25,"VersionEndExcluding":25,"VersionEndIncluding":25},"E04D5D21-1755-4766-8302-A0BE61EE9F43",[],[],{"lastModified":10,"cacheTime":109,"version":110},1793292715330,"2.0",{"score":112,"band":113,"action":114,"scoredAt":115},46,"Medium","Plan remediation","2026-10-29T06:54:54.522137+00:00"]