Mtower
Vendor:
First CVE: Aug 4, 2022 · Active for 3 years
13
Total CVEs
More Total CVEs than 91% of tracked products
13.0
Avg CVEs / Year
Higher CVE frequency than 97% of tracked products
7.5
Avg CVSS
Higher Avg CVSS than 59% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Mtower over time
Volume of CVEsAvg CVSS Base Score
First CVE
Aug 4, 2022
3 years ago
Most Recent CVE
Sep 16, 2022
1,408 days ago
CVE Severity & Scoring
Mtower13 CVEs
100%
All CVEs352,708 CVEs
45%
40%
11%
High
Attack Vector
Local1 (7.7%)
Network12 (92.3%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low13 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None13 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low1 (7.7%)
High0 (0.0%)
None12 (92.3%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (13 CVEs).
13 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2022-39830HIGH sign_pFwInfo in Samsung mTower through 0.3.0 has a missing check on the return value of EC_KEY_set_public_key_affine_coordinates, leading to a denial of service. | Sep 5, 2022 | 7.5 | 25 | NO | NO |
CVE-2022-39829HIGH There is a NULL pointer dereference in aes256_encrypt in Samsung mTower through 0.3.0 due to a missing check on the return value of EVP_CIPHER_CTX_new. | Sep 5, 2022 | 7.5 | 25 | NO | NO |
CVE-2022-39828HIGH sign_pFwInfo in Samsung mTower through 0.3.0 has a missing check on the return value of EC_KEY_set_private_key, leading to a denial of service. | Sep 5, 2022 | 7.5 | 25 | NO | NO |
CVE-2022-36622HIGH Samsung Electronics mTower v0.3.0 and earlier was discovered to contain a NULL pointer dereference via the function TEE_GetObjectInfo1. | Sep 1, 2022 | 7.5 | 25 | NO | NO |
CVE-2022-36621HIGH Samsung Electronics mTower v0.3.0 and earlier was discovered to contain a NULL pointer dereference via the function TEE_AllocateTransientObject. | Sep 1, 2022 | 7.5 | 25 | NO | NO |
CVE-2022-40761HIGH The function tee_obj_free in Samsung mTower through 0.3.0 allows a trusted application to trigger a Denial of Service (DoS) by invoking the function TEE_AllocateOperation with a di | Sep 16, 2022 | 7.5 | 24 | NO | NO |
CVE-2022-40760HIGH A Buffer Access with Incorrect Length Value vulnerablity in the TEE_MACUpdate function in Samsung mTower through 0.3.0 allows a trusted application to trigger a Denial of Service ( | Sep 16, 2022 | 7.5 | 24 | NO | NO |
CVE-2022-40759HIGH A NULL pointer dereference issue in the TEE_MACCompareFinal function in Samsung mTower through 0.3.0 allows a trusted application to trigger a Denial of Service (DoS) by invoking t | Sep 16, 2022 | 7.5 | 24 | NO | NO |
CVE-2022-40758HIGH A Buffer Access with Incorrect Length Value vulnerablity in the TEE_CipherUpdate function in Samsung mTower through 0.3.0 allows a trusted application to trigger a Denial of Servic | Sep 16, 2022 | 7.5 | 24 | NO | NO |
CVE-2022-40757HIGH A Buffer Access with Incorrect Length Value vulnerablity in the TEE_MACComputeFinal function in Samsung mTower through 0.3.0 allows a trusted application to trigger a Denial of Ser | Sep 16, 2022 | 7.5 | 24 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (13 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (13 CVEs).
Media Mentions
Signals from CVEs in this product scope (13 CVEs).
Top CNAs Publishing CVEs For Mtower
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 0.3.0 | 1 | 7.8 | 0.4% | 0 | 0 |