Samsung Smart Switch Pc vulnerabilities

5 CVEs affecting Samsung Smart Switch Pc, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-30673, published 2023-07-06.

More from Samsung.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-27842, published 2022-04-11. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. DLL hijacking vulnerability in Smart Switch PC prior to version 4.2.22022_4 allows attacker to execute abitrary code.
• CVE-2022-39846, published 2022-09-09. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. DLL hijacking vulnerability in Smart Switch PC prior to version 4.3.22083_3 allows attacker to execute arbitrary code.
• CVE-2022-39844, published 2022-09-09. High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days. Improper validation of integrity check vulnerability in Smart Switch PC prior to version 4.3.22083 allows local attackers to delete arbitrary directory using directory junction.
• CVE-2023-30672, published 2023-07-06. Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days. Improper privilege management vulnerability in Samsung Smart Switch for Windows Installer prior to version 4.3.23043_3 allows attackers to cause permanent DoS via directory junction.
• CVE-2023-30673, published 2023-07-06. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. Improper validation of integrity check vulnerability in Smart Switch PC prior to version 4.3.23052_1 allows local attackers to delete arbitrary directory using directory junction.