Samsung Easysetup vulnerabilities

2 CVEs affecting Samsung Easysetup, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-20896, published 2025-02-04.

More from Samsung.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-42555, published 2023-11-07. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Use of implicit intent for sensitive communication vulnerability in EasySetup prior to version 11.1.13 allows attackers to get the bluetooth address of user device.
• CVE-2025-20896, published 2025-02-04. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. Use of implicit intent for sensitive communication in EasySetup prior to version 11.1.18 allows local attackers to access sensitive information.