Vulnerabilities > Samsung > Cloud

DATE CVE VULNERABILITY TITLE RISK
2023-12-05 CVE-2023-42578 Improper Handling of Exceptional Conditions vulnerability in Samsung Cloud 4.7.0.3/5.1.0.8/5.2.00.7
Improper handling of insufficient permissions or privileges vulnerability in Samsung Data Store prior to version 5.2.00.7 allows remote attackers to access location information without permission.
network
low complexity
samsung CWE-755
7.5
2023-02-09 CVE-2023-21447 Exposure of Resource to Wrong Sphere vulnerability in Samsung Cloud 4.7.0.3/5.1.0.8/5.2.00.7
Improper access control vulnerabilities in Samsung Cloud prior to version 5.3.0.32 allows local attackers to access information with Samsung Cloud's privilege via implicit intent.
local
low complexity
samsung CWE-668
3.3
2023-02-09 CVE-2023-21448 Path Traversal vulnerability in Samsung Cloud 4.7.0.3/5.1.0.8/5.2.00.7
Path traversal vulnerability in Samsung Cloud prior to version 5.3.0.32 allows attacker to access specific png file.
local
low complexity
samsung CWE-22
3.3
2022-07-12 CVE-2022-33713 Unspecified vulnerability in Samsung Cloud 4.7.0.3/5.1.0.8
Implicit Intent hijacking vulnerability in Samsung Cloud prior to version 5.2.0 allows attacker to get sensitive information.
network
low complexity
samsung
7.5
2022-03-10 CVE-2022-24932 Improper Protection of Alternate Path vulnerability in Setup wizard process prior to SMR Mar-2022 Release 1 allows physical attacker package installation before finishing Setup wizard.
low complexity
google samsung
4.6
2021-03-25 CVE-2021-25368 Improper Authentication vulnerability in Samsung Cloud
Hijacking vulnerability in Samsung Cloud prior to version 4.7.0.3 allows attackers to intercept when the provider is executed.
network
low complexity
samsung CWE-287
7.5