Read the docs

Samsung

Records2044All Threatist records
Exploited (KEV)16In CISA KEV
CVSS critical180CVSS 9.0–10.0
CVSS high708CVSS 7.0–8.9

Exploited now

Samsung records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

8 records in Cloud · all components

TI-2022-14831 CVE-2022-33713 · GHSA-qmj6-w57h-94r9

Improper authorization in Samsung Cloud

Priority LOW 35

Implicit Intent hijacking vulnerability in Samsung Cloud prior to version 5.2.0 allows attacker to get sensitive information.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00922 Published 2022-07-11 Fixed in 5.2.0 CWE-285
Priority LOW 34

Improper handling of insufficient permissions or privileges vulnerability in Samsung Data Store prior to version 5.2.00.7 allows remote attackers to access location information without permission.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00669 Published 2023-12-05 Fixed in 5.2.00.7 CWE-755
TI-2021-07607 CVE-2021-25368 · GHSA-jwhr-gv8h-v3mw

Improper authentication in Samsung Cloud

Priority LOW 34

Hijacking vulnerability in Samsung Cloud prior to version 4.7.0.3 allows attackers to intercept when the provider is executed.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0058 Published 2021-03-25 Fixed in 4.7.0.3 CWE-287
TI-2023-07848 CVE-2023-21447 · GHSA-4cgf-47r3-59wr

Improper access control in Samsung Cloud

Priority LOW 18

Improper access control vulnerabilities in Samsung Cloud prior to version 5.3.0.32 allows local attackers to access information with Samsung Cloud's privilege via implicit intent.

CVSS 3.1MEDIUM 4.0 Local No auth No interaction EPSS 0.00149 Published 2023-02-09 Fixed in 5.3.0.32 CWE-284
Open these records in search →