Lucene search

[email protected]CVE-2022-44636

HistoryDec 13, 2022 - 3:15 p.m.

CVE-2022-44636

2022-12-1315:15:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

samsung

smart remote control

vulnerability

microphone access

bluetooth spoofing

cve-2022-44636

nvd

security

patch

update

2021 models

2022 models

4.6 Medium

CVSS3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

4.8 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:A/AC:M/Au:N/C:P/I:P/A:N

0.0005 Low

EPSS

Percentile

17.8%

JSON

The Samsung TV (2021 and 2022 model) smart remote control allows attackers to enable microphone access via Bluetooth spoofing when a user is activating remote control by pressing a button. This is fixed in xxx72510, E9172511 for 2021 models, xxxA1000, 4x2A0200 for 2022 models.

CPENameOperatorVersion
samsung:t-oscpakuc_firmwaresamsung t-oscpakuc firmwareeq-
samsung:t-oscpdeuc_firmwaresamsung t-oscpdeuc firmwareeq-
samsung:t-oscpuabc_firmwaresamsung t-oscpuabc firmwareeq-
samsung:t-nkm2akuc_firmwaresamsung t-nkm2akuc firmwareeq-
samsung:t-nkm2deuc_firmwaresamsung t-nkm2deuc firmwareeq-
samsung:t-nkm2uabc_firmwaresamsung t-nkm2uabc firmwareeq-
samsung:t-nklakuc_firmwaresamsung t-nklakuc firmwareeq-
samsung:t-nkldeuc_firmwaresamsung t-nkldeuc firmwareeq-
samsung:t-nkluabc_firmwaresamsung t-nkluabc firmwareeq-
samsung:t-ksu2eakuc_firmwaresamsung t-ksu2eakuc firmwareeq-

CPE	Name	Operator	Version
samsung:t-oscpakuc_firmware	samsung t-oscpakuc firmware	eq	-
samsung:t-oscpdeuc_firmware	samsung t-oscpdeuc firmware	eq	-
samsung:t-oscpuabc_firmware	samsung t-oscpuabc firmware	eq	-
samsung:t-nkm2akuc_firmware	samsung t-nkm2akuc firmware	eq	-
samsung:t-nkm2deuc_firmware	samsung t-nkm2deuc firmware	eq	-
samsung:t-nkm2uabc_firmware	samsung t-nkm2uabc firmware	eq	-
samsung:t-nklakuc_firmware	samsung t-nklakuc firmware	eq	-
samsung:t-nkldeuc_firmware	samsung t-nkldeuc firmware	eq	-
samsung:t-nkluabc_firmware	samsung t-nkluabc firmware	eq	-
samsung:t-ksu2eakuc_firmware	samsung t-ksu2eakuc firmware	eq	-

Rows per page:

1-10 of 151

References

samsung.com

samsungtvbounty.com/securityUpdates

4.6 Medium

CVSS3

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

4.8 Medium

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

ADJACENT_NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:A/AC:M/Au:N/C:P/I:P/A:N

0.0005 Low

EPSS

Percentile

17.8%

JSON

Related for CVE-2022-44636

cvelist1 prion1