Read the docs

Samsung

Records2044All Threatist records
Exploited (KEV)16In CISA KEV
CVSS critical180CVSS 9.0–10.0
CVSS high708CVSS 7.0–8.9

Exploited now

Samsung records in CISA KEV

Components

Products in the NVD configurations · select one to filter the records

Records

14 records in Health · all components

Priority LOW 25

Improper check vulnerability in Samsung Health prior to version 6.17 allows attacker to read internal cache data via exported component.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00793 Published 2021-06-11 Fixed in 6.17 CWE-703
TI-2021-07745 CVE-2021-25506 · GHSA-cmpr-j6rp-9r78

Improper authentication in Samsung Health

Priority LOW 24

Non-existent provider in Samsung Health prior to 6.19.1.0001 allows attacker to access it via malicious content provider or lead to denial of service.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00196 Published 2021-11-05 Fixed in 6.19.1.0001 CWE-287
TI-2022-06613 CVE-2022-22283 · GHSA-7547-299x-4pmv

Improper authentication in Samsung Health

Priority LOW 15

Improper session management vulnerability in Samsung Health prior to 6.20.1.005 prevents logging out from Samsung Health App.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00211 Published 2022-01-07 Fixed in 6.20.1.005 CWE-287
Open these records in search →