Improper access control in Samsung Reminder
Priority LOW 25CWE-284Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- None · Low · None
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-284.
Summary
Improper access control vulnerability in Reminder prior to versions 12.3.01.3000 in Android S(12), 12.2.05.6000 in Android R(11) and 11.6.08.6000 in Andoid Q(10) allows attackers to register reminders or execute exporeted activities remotely.
Why it matters now
EPSS 0.00617 49th percentileScored 2026-11-07
Fix Fixed Reminder (Samsung Mobile): 12.3.01.3000 in Android S(12), 12.2.05.6000 in Android R(11) and 11.6.08.6000 in Andoid Q(10)
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Samsung | Reminder | - to before 12.3.01.3000 in Android S(12), 12.2.05.6000 in Android R(11) and 11.6.08.6000 in Andoid Q(10) | 12.3.01.3000 in Android S(12), 12.2.05.6000 in Android R(11) and 11.6.08.6000 in Andoid Q(10) | Patch available | CNA |
- Reminder VendorSamsung Affected - to before 12.3.01.3000 in Android S(12), 12.2.05.6000 in Android R(11) and 11.6.08.6000 in Andoid Q(10) Fixed in 12.3.01.3000 in Android S(12), 12.2.05.6000 in Android R(11) and 11.6.08.6000 in Andoid Q(10) Patch available CNA
CPE configurations NVD · 6
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:samsung:reminder:*:*:*:*:*:*:*:* | before 12.3.01.3000 | Vulnerable | Samsung |
| cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:* | 12.0 | Running on | |
| cpe:2.3:a:samsung:reminder:*:*:*:*:*:*:*:* | before 12.2.05.6000 | Vulnerable | Samsung |
| cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:* | 11.0 | Running on | |
| cpe:2.3:a:samsung:reminder:*:*:*:*:*:*:*:* | before 11.6.08.6000 | Vulnerable | Samsung |
| cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:* | 10.0 | Running on |
- cpe:2.3:a:samsung:reminder:*:*:*:*:*:*:*:* Versions before 12.3.01.3000 Vulnerable ·Samsung
- cpe:2.3:o:google:android:12.0:*:*:*:*:*:*:* Versions 12.0 Running on ·Google
- cpe:2.3:a:samsung:reminder:*:*:*:*:*:*:*:* Versions before 12.2.05.6000 Vulnerable ·Samsung
- cpe:2.3:o:google:android:11.0:*:*:*:*:*:*:* Versions 11.0 Running on ·Google
- cpe:2.3:a:samsung:reminder:*:*:*:*:*:*:*:* Versions before 11.6.08.6000 Vulnerable ·Samsung
- cpe:2.3:o:google:android:10.0:*:*:*:*:*:*:* Versions 10.0 Running on ·Google
Remediation
- Fix · CNA Reminder (Samsung Mobile) Fixed in 12.3.01.3000 in Android S(12), 12.2.05.6000 in Android R(11) and 11.6.08.6000 in Andoid Q(10)
Timeline
- 2026-10-02 Threatist record created from CVE-2022-23433
- 2026-10-03 Alias added: GHSA-mwwv-v58h-qcvw
References
More Samsung Reminder vulnerabilities
- TI-2022-06615 Code injection in Samsung Reminder CVSS 3.1HIGH 7.1
- TI-2022-18870 Sensitive information in log files in Samsung Reminder CVSS 3.1MEDIUM 5.9
Sources
- CVE-2022-23433 · CVE Program
- CVE-2022-23433 · NVD
- FIRST EPSS
- GHSA-mwwv-v58h-qcvw · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences