Samsung S Assistant vulnerabilities

2 CVEs affecting Samsung S Assistant, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-22289, published 2022-01-10.

More from Samsung.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-22289, published 2022-01-10. Medium severity, CVSS 5.3. EPSS: 0.8% chance of exploitation in the next 30 days. Improper access control vulnerability in S Assistant prior to version 7.5 allows attacker to remotely get senstive information.
• CVE-2021-25341, published 2021-03-04. Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days. Calling of non-existent provider in S Assistant prior to version 6.5.01.22 allows unauthorized actions including denial of service attack by hijacking the provider.