1. Home
  2. CVE Database
  3. CVE-2022-33707
MEDIUM · 5.3

CVE-2022-33707

Improper identifier creation logic in Find My Mobile prior to version 7.2.24.12 allows attacker to identify the device.

Vulnerability Description

Improper identifier creation logic in Find My Mobile prior to version 7.2.24.12 allows attacker to identify the device.

CVSS Score

5.3

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
SamsungFind My Mobile< 7.2.24.12

Related Weaknesses (CWE)

CWE-330CWE-334

References

FAQ

What is CVE-2022-33707?

CVE-2022-33707 is a vulnerability with a CVSS score of 5.3 (MEDIUM). Improper identifier creation logic in Find My Mobile prior to version 7.2.24.12 allows attacker to identify the device.

How severe is CVE-2022-33707?

CVE-2022-33707 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-33707?

Check the references section above for vendor advisories and patch information. Affected products include: Samsung Find My Mobile.