CNNVD-202512-316 Information

CNNVD ID

CNNVD-202512-316

CVE-2025-58484

  • CNNVD Published: 2025-12-02

Description (Chinese)

SAMSUNG Cloud Assistant是韩国三星(SAMSUNG)公司的一个管理和协调设备与三星云服务之间的数据同步的组件。 SAMSUNG Cloud Assistant 8.0.03.8之前版本存在安全漏洞,该漏洞源于默认权限设置不当,可能导致本地攻击者访问沙盒中的部分数据。

Description (English)

SAMSUNG Cloud Assistant is a component of data synchronization between the management and coordination equipment of the Korea Samsung Corporation and the services of the Tribula. The previous version of SAMSUNG Cloud Assistant 8.0.03.8 had a security loophole, which stemmed from the default power set-up and could lead local assailants to access some of the data in the sandbox.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

三星

Published

2025-12-02

Last Modified

2026-02-24

References

https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=12 https://access.redhat.com/security/cve/cve-2025-58484

Patch

https://security.samsungmobile.com/serviceWeb.smsb?year=2025&month=12

Share on: