CVE-2024-20851: Samsung Cloud

Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days.

Improper access control vulnerability in Samsung Data Store prior to version 5.3.00.4 allows local attackers to launch arbitrary activity with Samsung Data Store privilege.

Affected products

• Samsung Cloud: before 5.3.00.4 (fixed in 5.3.00.4)

Published 2024-04-02. Last modified 2026-06-17.