What is CVE-2022-39893?

CVE-2022-39893 is a low-severity vulnerability in Samsung Galaxy Buds Pro Manage, classified under Insertion of Sensitive Information into Log File. CVSS score: 3.3/10. Published 2022-11-09.

How severe is CVE-2022-39893?

Low severity. CVSS v3 base score is 3.3 out of 10.

Information disclosure in Samsung Galaxy Buds Pro Manage

CVE-2022-39893

Sensitive information exposure vulnerability in FmmBaseModel in Galaxy Buds Pro Manage prior to version 4.1.22092751 allows local attackers with log access permission to get device identifier data through device log.

EPSS: 0.002 (11.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.3 (Low). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N.

Affected products

Samsung Galaxy_buds_pro_manage
Samsung Mobile Galaxy Buds Pro Manager — versions unspecified

Weakness classification (CWE)

CWE-532 — Insertion of Sensitive Information into Log File

References

mobile.security@samsung.com (Vendor Advisory)

Frequently asked questions

What is CVE-2022-39893?: CVE-2022-39893 is a low-severity vulnerability in Samsung Galaxy Buds Pro Manage, classified under Insertion of Sensitive Information into Log File. CVSS score: 3.3/10. Published 2022-11-09.
How severe is CVE-2022-39893?: Low severity. CVSS v3 base score is 3.3 out of 10.