Samsung Factorycamera vulnerabilities

3 CVEs affecting Samsung Factorycamera, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-39861, published 2022-10-07.

More from Samsung.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-27838, published 2022-04-11. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Improper access control vulnerability in FactoryCamera prior to version 2.1.96 allows attacker to access the file with system privilege.
• CVE-2022-39858, published 2022-10-07. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Path traversal vulnerability in AtBroadcastReceiver in FactoryCamera prior to version 3.5.51 allows attackers to write arbitrary file as FactoryCamera privilege.
• CVE-2022-39861, published 2022-10-07. Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days. Unprotected Receiver in AtBroadcastReceiver in FactoryCamera prior to version 3.5.51 allows attackers to record video without camera privilege.