google android CVE-2022-24932 in Google and Samsung Products
Published on March 10, 2022

product logo product logo
Improper Protection of Alternate Path vulnerability in Setup wizard process prior to SMR Mar-2022 Release 1 allows physical attacker package installation before finishing Setup wizard.

NVD

Vulnerability Analysis

CVE-2022-24932 is exploitable with physical access, and does not require authorization privileges or user interaction. This vulnerability is consided to have a high level of attack complexity. The potential impact of an exploit of this vulnerability is considered to have no impact on confidentiality, a high impact on integrity, and no impact on availability.

Attack Vector:
PHYSICAL
Attack Complexity:
HIGH
Privileges Required:
NONE
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
NONE
Integrity Impact:
HIGH
Availability Impact:
NONE

Weakness Type

Improper Protection of Alternate Path

The product does not sufficiently protect all possible paths that a user can take to access restricted functionality or resources.


Products Associated with CVE-2022-24932

stack.watch emails you whenever new vulnerabilities are published in Google Android or Samsung Cloud. Just hit a watch button to start following.

 
 

Affected Versions

Samsung Mobile Devices: Samsung Mobile Samsung Clould:

Exploit Probability

EPSS
0.02%
Percentile
5.82%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.