Samsung Kies Air vulnerabilities

2 CVEs affecting Samsung Kies Air, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2012-5859, published 2012-12-03.

More from Samsung.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2012-5858, published 2012-12-03. Medium severity, CVSS 4.3. EPSS: 4.3% chance of exploitation in the next 30 days. Samsung Kies Air 2.1.207051 and 2.1.210161 relies on the IP address for authentication, which allows remote man-in-the-middle attackers to read arbitrary phone contents by spoofing or controlling the…
• CVE-2012-5859, published 2012-12-03. Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days. Samsung Kies Air 2.1.207051 and 2.1.210161 allows remote attackers to cause a denial of service (crash) via a crafted request to www/apps/KiesAir/jws/ssd.php.