Medium severity4.3NVD Advisory· Published Apr 11, 2022· Updated Jun 17, 2026
CVE-2022-28777
CVE-2022-28777
Description
Improper access control vulnerability in Samsung Members prior to version 13.6.08.5 allows local attacker to execute call function without CALL_PHONE permission.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:samsung:members:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:samsung:members:*:*:*:*:*:*:*:*range: <13.6.08.5
- (no CPE)range: <13.6.08.5
- (no CPE)range: -
Patches
Vulnerability mechanics
References
1- security.samsungmobile.com/serviceWeb.smsbnvdVendor Advisory
News mentions
0No linked articles in our index yet.