CVE-2022-39909

Insufficient verification of data authenticity vulnerability in Samsung Gear IconX PC Manager prior to version 2.1.221019.51 allows local attackers to create arbitrary file using symbolic link.

Score

CVSS 3.1 7.1 High

Status

Modified - mobile.security@samsung.com

Published

2022-12-08

Last modified

2025-04-23

Weaknesses

CWE-345

Affected products

• Gear Iconx Pc Manager (Samsung)
• Samsung Gear Iconx Pc Manager (Samsung Mobile)

References

• https://security.samsungmobile.com/serviceWeb.smsb?year=2022&month=12