description: Improper validation of integrity check vulnerability in Samsung USB Driver Windows Installer for Mobile Phones prior to version 1.7.56.0 allows local attackers to delete arbitrary directory using directory junction.
problem types: CWE-354 Improper Validation of Integrity Check Value
affected:
{
product: Samsung USB Driver Windows Installer for Mobile Phones
vendor: Samsung Mobile
versions:
lessThan: 1.7.56.0, status: affected, version: unspecified, versionType: custom
}
metrics:
other: [
content: {'attackComplexity': 'LOW', 'attackVector': 'LOCAL', 'availabilityImpact': 'HIGH', 'baseScore': 7.1, 'baseSeverity': 'HIGH', 'confidentialityImpact': 'NONE', 'integrityImpact': 'HIGH', 'privilegesRequired': 'LOW', 'scope': 'UNCHANGED', 'userInteraction': 'NONE', 'vectorString': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H'}
type: unknown
]