7.1
High
CVE-2022-39909 Insufficient verification of data authenticity vulnerability in Samsung Gear IconX PC Manager prior to version…
Description
Insufficient verification of data authenticity vulnerability in Samsung Gear IconX PC Manager prior to version 2.1.221019.51 allows local attackers to create arbitrary file using symbolic link.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Samsung Gear IconX PC Manager 2.1 | earliest → < 2.1.221019.51 | 2.1.221019.51 |