CVE-2022-22288: High severity samsung galaxy store vulnerability
Published Jan 7, 2022
·Updated
Improper authorization vulnerability in Galaxy Store prior to 4.5.36.5 allows remote app installation of the allowlist.
Affected Software
1 affected component
Samsung Galaxy Store<4.5.36.5
Event History
Jan 7, 2022
CVE Published
via MITRE·10:39 PM
Data Sourced
via MITRE·10:39 PM
DescriptionSeverityWeakness
Jan 10, 2022
Data Sourced
via NVD·02:12 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-22288?
The severity of CVE-2022-22288 is considered to be high due to improper authorization allowing remote app installation.
2
How do I fix CVE-2022-22288?
To fix CVE-2022-22288, update the Samsung Galaxy Store to version 4.5.36.5 or later.
3
What causes CVE-2022-22288?
CVE-2022-22288 is caused by an improper authorization vulnerability in earlier versions of the Galaxy Store.
4
Who is affected by CVE-2022-22288?
Users of Samsung Galaxy Store versions prior to 4.5.36.5 are affected by CVE-2022-22288.
5
What are the implications of CVE-2022-22288?
The implications of CVE-2022-22288 include potential unauthorized app installations, posing security risks to users.