Samsung Gear Iconx Pc Manager vulnerabilities

2 CVEs affecting Samsung Gear Iconx Pc Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-39909, published 2022-12-08.

More from Samsung.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-28792, published 2022-05-03. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. DLL hijacking vulnerability in Gear IconX PC Manager prior to version 2.1.220405.51 allows attacker to execute arbitrary code. The patch adds proper absolute path to prevent dll hijacking.
• CVE-2022-39909, published 2022-12-08. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Insufficient verification of data authenticity vulnerability in Samsung Gear IconX PC Manager prior to version 2.1.221019.51 allows local attackers to create arbitrary file using symbolic link.