CVE-2022-28792 Other in Gear IconX PC Manager
Attacker can execute arbitrary code via DLL hijacking in Samsung Gear IconX PC Manager, requiring a software update to fix.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-28792?
CVE-2022-28792 is a medium-severity vulnerability in Samsung Mobile Gear IconX PC Manager, published on 3 May 2022. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
DLL hijacking vulnerability in Gear IconX PC Manager prior to version 2.1.220405.51 allows attacker to execute arbitrary code. The patch adds proper absolute path to prevent dll hijacking.
Weakness: CWE-427
Which versions are affected by CVE-2022-28792?
It affects 1 product.
Products include Samsung Gear Iconx Pc Manager.
How do I fix CVE-2022-28792?
No fix has been published for CVE-2022-28792 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-28792 being exploited?
There is no known exploitation of CVE-2022-28792 in the wild and no public exploit code.
Other vulnerabilities in Samsung Mobile Gear IconX PC Manager
Sources
Also known as GHSA-pw9r-x35f-xg5m.