Samsung Find My Mobile vulnerabilities

5 CVEs affecting Samsung Find My Mobile, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-42571, published 2023-12-05.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-33707, published 2022-07-12. Medium severity, CVSS 5.3. EPSS: 0.8% chance of exploitation in the next 30 days. Improper identifier creation logic in Find My Mobile prior to version 7.2.24.12 allows attacker to identify the device.
CVE-2023-42571, published 2023-12-05. Medium severity, CVSS 6.8. EPSS: 0.3% chance of exploitation in the next 30 days. Abuse of remote unlock in Find My Mobile prior to version 7.3.13.4 allows physical attacker to unlock the device remotely by resetting the Samsung Account password with SMS verification when user…
CVE-2022-36878, published 2022-09-09. Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days. Exposure of Sensitive Information in Find My Mobile prior to version 7.2.25.14 allows local attacker to access IMEI via log.
CVE-2022-30742, published 2022-06-07. Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days. Sensitive information exposure vulnerability in FmmExtraOperation of Find My Mobile prior to 7.2.24.12 allows local attackers with log access permissio to get sim card information through device log.
CVE-2022-30741, published 2022-06-07. Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days. Sensitive information exposure vulnerability in SimChangeAlertManger of Find My Mobile prior to 7.2.24.12 allows local attackers with log access permission to get sim card information through device…