CVE-2022-39901 Auth bypass in Samsung Mobile Devices
Remote attackers can disable network traffic encryption between the device and base station due to improper authentication in the Exynos baseband.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2022-39901?
CVE-2022-39901 is a medium-severity authentication bypass vulnerability in Samsung Mobile Devices, published on 8 Dec 2022. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Improper authentication in Exynos baseband prior to SMR DEC-2022 Release 1 allows remote attacker to disable the network traffic encryption between UE and gNodeB.
Weakness: CWE-287
Which versions are affected by CVE-2022-39901?
It affects 1 product.
Products include Samsung Exynos Firmware.
How do I fix CVE-2022-39901?
Apply the vendor's patch.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2022-39901 being exploited?
There is no known exploitation of CVE-2022-39901 in the wild and no public exploit code.
Other vulnerabilities in Samsung Mobile Devices
Sources
Also known as A-263783333, GHSA-cgvm-v5x3-2hm9, PUB-A-263783333.