Read the docs
TI-2022-12877 Aliases CVE-2022-30742GHSA-75g9-xg49-wc86

Information disclosure in Samsung Find My Mobile

Priority LOW 15CWE-200Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
Low · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-200.

Summary

Sensitive information exposure vulnerability in FmmExtraOperation of Find My Mobile prior to 7.2.24.12 allows local attackers with log access permissio to get sim card information through device log.

Why it matters now

EPSS 0.00212 11th percentileScored 2026-11-07
Fix Fixed Find My Mobile (Samsung Mobile): 7.2.24.12

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
SamsungFind My Mobilebefore 7.2.24.127.2.24.12Patch availableCNA
  • Find My Mobile VendorSamsung Affected before 7.2.24.12 Fixed in 7.2.24.12 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:samsung:find_my_mobile:*:*:*:*:*:*:*:*before 7.2.24.12VulnerableSamsung
  • cpe:2.3:a:samsung:find_my_mobile:*:*:*:*:*:*:*:* Versions before 7.2.24.12 Vulnerable ·Samsung

Remediation

  • Fix · CNA Find My Mobile (Samsung Mobile) Fixed in 7.2.24.12

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Samsung Mobile Find My Mobile 7.2.24.12

    2 records Highest priority Priority LOW 2 LOW

    Other records, highest priority first

    • TI-2022-12876 Information disclosure in Samsung Find My MobilePriority LOW 15
    Show all 2 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-30742
  2. 2026-10-03 Alias added: GHSA-75g9-xg49-wc86

References

Advisory 1

  • TI-2023-22721 Abuse of remote unlock in Find My Mobile prior to version 7.3.13.4 allows physical… CVSS 3.1HIGH 7.6
  • TI-2022-14825 Improper identifier creation logic in Find My Mobile prior to version 7.2.24.12 allows attacker to identify the device. CVSS 3.1MEDIUM 5.3
  • TI-2022-17093 Information disclosure in Samsung Find My Mobile CVSS 3.1LOW 3.3
  • TI-2022-12876 Information disclosure in Samsung Find My Mobile CVSS 3.1LOW 3.3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences