Read the docs
TI-2022-08867 Aliases CVE-2022-25154GHSA-c4pw-3ff6-5jmm

A DLL hijacking vulnerability in Samsung portable SSD T5 PC software before 1.6.9 could…

Priority LOW 32CWE-427Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
Required
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-427.

Summary

A DLL hijacking vulnerability in Samsung portable SSD T5 PC software before 1.6.9 could allow a local attacker to escalate privileges. (An attacker must already have user privileges on Windows 7, 10, or 11 to exploit this vulnerability.)

Why it matters now

EPSS 0.00239 15th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 2

CPEVersionsRoleVendor
cpe:2.3:o:samsung:t5_firmware:*:*:*:*:*:*:*:*before 1.6.9VulnerableSamsung
cpe:2.3:h:samsung:t5:-:*:*:*:*:*:*:*not specified by NVDRunning onSamsung
  • cpe:2.3:o:samsung:t5_firmware:*:*:*:*:*:*:*:* Versions before 1.6.9 Vulnerable ·Samsung
  • cpe:2.3:h:samsung:t5:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Samsung

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-25154
  2. 2026-10-03 Alias added: GHSA-c4pw-3ff6-5jmm

References

Advisory 1

  • TI-2018-08628 An issue was discovered on Samsung 840 EVO and 850 EVO devices (only in "ATA high" mode… CVSS 3.0MEDIUM 4.0

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences