CVE-2022-39901: Medium severity Samsung Exynos Firmware vulnerability
Improper authentication in Exynos baseband prior to SMR DEC-2022 Release 1 allows remote attacker to disable the network traffic encryption between UE and gNodeB.
Other sources
In TBD of TBD, there is a possible downgrade attack against cryptography in a 5G NSA network due to a logic error in the code. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
— OSV
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:unknown:to a version that resolves this vulnerability.Fixed in Pixel-family specific:2023-06-05 - Upgrade
Upgrade
Exynos basebandto a version that resolves this vulnerability.Patch SMR DEC-2022 Release 1
Event History
Frequently Asked Questions
What is CVE-2022-39901?
CVE-2022-39901 refers to an improper authentication vulnerability in Exynos baseband prior to SMR DEC-2022 Release 1, allowing a remote attacker to disable network traffic encryption between UE and gNodeB.
How severe is CVE-2022-39901?
CVE-2022-39901 has a severity rating of 6.5 which is considered medium.
What software is affected by CVE-2022-39901?
The Exynos baseband firmware is affected by CVE-2022-39901.
How can a remote attacker exploit CVE-2022-39901?
A remote attacker can exploit CVE-2022-39901 by disabling the network traffic encryption between UE and gNodeB.
Is Samsung Exynos vulnerable to CVE-2022-39901?
No, the Samsung Exynos itself is not vulnerable. Only the Exynos baseband firmware is affected.
How can I fix CVE-2022-39901?
To fix CVE-2022-39901, it is recommended to apply SMR DEC-2022 Release 1 or a subsequent security update provided by Samsung.
Where can I find more information about CVE-2022-39901?
You can find more information about CVE-2022-39901 on the Samsung Mobile Security website.