PT-2022-27273 · Samsung · Samsungtv

Published 2022-12-13 · Updated 2025-04-22 · CVE-2022-44636

Positive Technologies (AI Summary)

CVSS v3.1

4.6

Medium

Base vector

AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Samsung TV versions 2021 through 2022

Description The smart remote control of the Samsung TV allows attackers to enable microphone access via Bluetooth spoofing when a user is activating the remote control by pressing a button.

Recommendations For 2021 models, update to version xxx72510 or E9172511. For 2022 models, update to version xxxA1000 or 4x2A0200.

Fix

Authentication Bypass by Spoofing

Weakness Enumeration

CWE-290

Related Identifiers

CVE-2022-44636

Affected Products

Samsungtv

References · 6

• https://samsung.com · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-44636 · Security Note
• https://samsungtvbounty.com/securityUpdates · Vendor Advisory
• https://t.me/cibsecurity/54428 · Telegram Post
• https://t.me/cvenotify/40960 · Telegram Post
• https://t.me/cvenotify/119286 · Telegram Post