PT-2025-35673 · Samsung · Samsung Account

Published 2025-09-03 · Updated 2025-10-01 · CVE-2023-21481

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Samsung Account versions prior to 14.1.0.0

Description An improper URL input validation issue exists in the Samsung Account application. This can allow remote attackers to obtain sensitive information.

Recommendations Update the Samsung Account application to version 14.1.0.0 or later.

Fix

Related Identifiers

CVE-2023-21481

Affected Products

Samsung Account

References · 7

• https://security.samsungmobile.com/serviceWeb.smsb?year=2023&month=04 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-21481 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-21481 · Security Note
• https://t.me/cveNotify/137119 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1963231274081927633 · Twitter Post
• https://twitter.com/CVEnew/status/1963112913272762659 · Twitter Post
• https://t.me/CVEtracker/31552 · Telegram Post