CVE-2022-44636

Published: Dec 13, 2022Modified: Apr 22, 2025

4.6

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Exploitability: 2.1 / Impact: 2.5

Source: NVD

Description

The Samsung TV (2021 and 2022 model) smart remote control allows attackers to enable microphone access via Bluetooth spoofing when a user is activating remote control by pressing a button. This is fixed in xxx72510, E9172511 for 2021 models, xxxA1000, 4x2A0200 for 2022 models.

Affected (15)

Products: Samsung: T Oscpakuc Firmware, T Oscpdeuc Firmware, T Oscpuabc Firmware, T Nkm2akuc Firmware, T Nkm2deuc Firmware, T Nkm2uabc Firmware, T Nklakuc Firmware, T Nkldeuc Firmware, T Nkluabc Firmware, T Ksu2eakuc Firmware, T Ksu2edeuc Firmware, T Ksu2euab Firmware, T Ptmakuc Firmware, T Ptmdeuc Firmware, T Ptmuabc Firmware

15 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Samsung T Oscpakuc Firmware	All versions

Running on/with	Platform Versions
Samsung T Oscpakuc	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Samsung T Oscpdeuc Firmware	All versions

Running on/with	Platform Versions
Samsung T Oscpdeuc	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Samsung T Oscpuabc Firmware	All versions

Running on/with	Platform Versions
Samsung T Oscpuabc	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Samsung T Nkm2akuc Firmware	All versions

Running on/with	Platform Versions
Samsung T Nkm2akuc	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Samsung T Nkm2deuc Firmware	All versions

Running on/with	Platform Versions
Samsung T Nkm2deuc	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Samsung T Nkm2uabc Firmware	All versions

Running on/with	Platform Versions
Samsung T Nkm2uabc	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Samsung T Nklakuc Firmware	All versions

Running on/with	Platform Versions
Samsung T Nklakuc	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Samsung T Nkldeuc Firmware	All versions

Running on/with	Platform Versions
Samsung T Nkldeuc	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Samsung T Nkluabc Firmware	All versions

Running on/with	Platform Versions
Samsung T Nkluabc	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Samsung T Ksu2eakuc Firmware	All versions

Running on/with	Platform Versions
Samsung T Ksu2eakuc	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Samsung T Ksu2edeuc Firmware	All versions

Running on/with	Platform Versions
Samsung T Ksu2edeuc	All versions

Configuration L

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Samsung T Ksu2euab Firmware	All versions

Running on/with	Platform Versions
Samsung T Ksu2euab	All versions

Configuration M

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Samsung T Ptmakuc Firmware	All versions

Running on/with	Platform Versions
Samsung T Ptmakuc	All versions

Configuration N

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Samsung T Ptmdeuc Firmware	All versions

Running on/with	Platform Versions
Samsung T Ptmdeuc	All versions

Configuration O

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Samsung T Ptmuabc Firmware	All versions

Running on/with	Platform Versions
Samsung T Ptmuabc	All versions

Related CWEs

CWE-290

Authentication Bypass by Spoofing

This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.

References (4)

https://samsung.com

Source: cve@mitre.org

Vendor Advisory

https://samsungtvbounty.com/securityUpdates

Source: cve@mitre.org

Vendor Advisory

https://samsung.com

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://samsungtvbounty.com/securityUpdates

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.