Samsung vulnerabilities, page 5
1,598 vulnerabilities
Known vulnerabilities in Samsung products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 1,675 products.
CVE-2013-3585samsungsmart_viewer
EPSS score23.54%
Samsung Web Viewer for Samsung DVR devices stores credentials in cleartext, which allows context-dependent attackers to obtain sensitive information via vectors involving (1) direct access to a file or (2) the user-setup web page.CVE-2021-42114micronddr4_sdram_firmware+11EPSS score2.98%
Modern DRAM devices (PC-DDR4, LPDDR4X) are affected by a vulnerability in their internal Target Row Refresh (TRR) mitigation against Rowhammer attacks. Novel non-uniform Rowhammer access patterns, consisting of aggressors with different frequencies, phases, and amplitudes allow triggering bit flips on affected memory modules using our Blacksmith fuzzer. The patterns generated by Blacksmith were able to trigger bitflips on all 40 PC-DDR4 DRAM devices in our test pool, which cover the three major DRAM manufacturers: Samsung, SK Hynix, and Micron. This means that, even when chips advertised as Rowhammer-free are used, attackers may still be able to exploit Rowhammer. For example, this enables privilege-escalation attacks against the kernel or binaries such as the sudo binary, and also triggering bit flips in RSA-2048 keys (e.g., SSH keys) to gain cross-tenant virtual-machine access. We can confirm that DRAM devices acquired in July 2020 with DRAM chips from all three major DRAM vendors (Samsung, SK Hynix, Micron) are affected by this vulnerability. For more details, please refer to our publication.CVE-2021-42913samsungsyncthru_web_serviceEPSS score1.85%
The SyncThru Web Service on Samsung SCX-6x55X printers allows an attacker to gain access to a list of SMB users and cleartext passwords by reading the HTML source code. Authentication is not required.CVE-2021-39373samsungdrive_managerEPSS score0.34%
Samsung Drive Manager 2.0.104 on Samsung H3 devices allows attackers to bypass intended access controls on disk management. WideCharToMultiByte, WideCharStr, and MultiByteStr can contribute to password exposure.CVE-2021-25494samsung mobilesamsung notes+1EPSS score0.29%
A possible buffer overflow vulnerability in libSPenBase library of Samsung Notes prior to Samsung Note version 4.3.02.61 allows arbitrary code execution.CVE-2021-25489samsung mobilesamsung mobile devices+1KEVEPSS score0.53%
Assuming radio permission is gained, missing input validation in modem interface driver prior to SMR Oct-2021 Release 1 results in format string bug leading to kernel panic.CVE-2021-25379samsung mobilegallery+1EPSS score0.21%
Intent redirection vulnerability in Gallery prior to version 5.4.16.1 allows attacker to execute privileged action.CVE-2021-25373samsung mobilecustomization service+1EPSS score0.21%
Using unsafe PendingIntent in Customization Service prior to version 2.2.02.1 in Android O(8.x), 2.4.03.0 in Android P(9.0), 2.7.02.1 in Android Q(10.0) and 2.9.01.1 in Android R(11.0) allows local attackers to perform unauthorized action without permission via hijacking the PendingIntent.CVE-2021-25526samsung mobilesamsung blockchain wallet+1EPSS score0.21%
Intent redirection vulnerability in Samsung Blockchain Wallet prior to version 1.3.02.8 allows attacker to execute privileged action.CVE-2021-25498samsung mobilesamsung notes+1EPSS score0.28%
A possible buffer overflow vulnerability in maetd_eco_cb_mode of libSPenBase library of Samsung Notes prior to Samsung Notes version 4.3.02.61 allows arbitrary code execution.CVE-2021-25399samsung mobilesmart manager+1EPSS score0.22%
Improper configuration in Smart Manager prior to version 11.0.05.0 allows attacker to access the file with system privilege.CVE-2021-25341samsung mobiles assistant+1EPSS score0.22%
Calling of non-existent provider in S Assistant prior to version 6.5.01.22 allows unauthorized actions including denial of service attack by hijacking the provider.CVE-2021-25378samsung mobilesmartthings+1EPSS score0.97%
Improper access control of certain port in SmartThings prior to version 1.7.63.6 allows remote temporary denial of service.CVE-2021-25380samsung mobilebixby+1EPSS score0.60%
Improper handling of exceptional conditions in Bixby prior to version 3.0.53.02 allows attacker to execute the actions registered by the user.CVE-2021-25343samsung mobilesamsung members+1EPSS score0.22%
Calling of non-existent provider in Samsung Members prior to version 2.4.81.13 (in Android O(8.1) and below) and 3.8.00.13 (in Android P(9.0) and above) allows unauthorized actions including denial of service attack by hijacking the provider.CVE-2021-25369samsung mobilesamsung mobile devices+1KEVEPSS score1.08%
An improper access control vulnerability in sec_log file prior to SMR MAR-2021 Release 1 exposes sensitive kernel information to userspace.CVE-2021-25394samsung mobilesamsung mobile devices+1KEVEPSS score0.40%
A use after free vulnerability via race condition in MFC charger driver prior to SMR MAY-2021 Release 1 allows arbitrary write given a radio privilege is compromised.CVE-2021-25466samsung mobilesamsung internet+1EPSS score0.77%
Improper scheme check vulnerability in Samsung Internet prior to version 15.0.2.47 allows attackers to perform Man-in-the-middle attack and obtain Samsung Account token.CVE-2021-25353samsung mobilegalaxy themes+1EPSS score0.22%
Using empty PendingIntent in Galaxy Themes prior to version 5.2.00.1215 allows local attackers to read/write private file directories of Galaxy Themes application without permission via hijacking the PendingIntent.CVE-2021-25371samsung mobilesamsung mobile devices+1KEVEPSS score0.80%
A vulnerability in DSP driver prior to SMR Mar-2021 Release 1 allows attackers load arbitrary ELF libraries inside DSP.