Skip to main content

Find My Mobile CVE-2022-33707

MEDIUM
Small Space of Random Values (CWE-334)
2022-07-12 mobile.security@samsung.com
Information Disclosure Find My Mobile
5.3
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
5.3 MEDIUM
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
None
Availability
None

Lifecycle Timeline

1
CVE Published
Jul 12, 2022 - 14:15 nvd
MEDIUM 5.3

DescriptionNVD

Improper identifier creation logic in Find My Mobile prior to version 7.2.24.12 allows attacker to identify the device.

AnalysisAI

Improper identifier creation logic in Find My Mobile prior to version 7.2.24.12 allows attacker to identify the device. Rated medium severity (CVSS 5.3), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-334. Improper identifier creation logic in Find My Mobile prior to version 7.2.24.12 allows attacker to identify the device. Affected products include: Samsung Find My Mobile. Version information: version 7.2.24.12.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Find My Mobile

View all
CVE-2023-42571 MEDIUM
6.8 Dec 05

Abuse of remote unlock in Find My Mobile prior to version 7.3.13.4 allows physical attacker to unlock the device remotel
CVE-2022-36878 LOW
3.3 Sep 09

Exposure of Sensitive Information in Find My Mobile prior to version 7.2.25.14 allows local attacker to access IMEI via

CVE-2022-30742 LOW
3.3 Jun 07

Sensitive information exposure vulnerability in FmmExtraOperation of Find My Mobile prior to 7.2.24.12 allows local atta
CVE-2022-30741 LOW
3.3 Jun 07

Sensitive information exposure vulnerability in SimChangeAlertManger of Find My Mobile prior to 7.2.24.12 allows local a

Same weakness CWE-334 – Small Space of Random Values

View all
CVE-2021-21955 HIGH POC
7.5
CVE-2023-39979 CRITICAL
9.8
CVE-2025-3895 CRITICAL
9.1
CVE-2024-54017 MEDIUM
6.9
CVE-2022-22517 HIGH
7.5
CVE-2020-7566 HIGH
7.3
CVE-2024-52616 MEDIUM
5.3
CVE-2022-20941 MEDIUM
5.3

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2022-33707 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy