S Assistant
CVEs (5)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2022-22289 | Med | 0.35 | 5.3 | 0.01 | Jan 10, 2022 | Improper access control vulnerability in S Assistant prior to version 7.5 allows attacker to remotely get senstive information. | ||
| CVE-2025-21040 | Med | 0.33 | 5.1 | 0.00 | Sep 3, 2025 | Improper verification of intent by ExternalBroadcastReceiver in S Assistant prior to version 9.3.2 allows local attackers to modify itinerary information. | ||
| CVE-2025-21039 | Med | 0.33 | 5.1 | 0.00 | Sep 3, 2025 | Improper verification of intent by SystemExceptionalBroadcastReceiver in S Assistant prior to version 9.3.2 allows local attackers to modify itinerary information. | ||
| CVE-2025-21038 | Med | 0.33 | 5.1 | 0.00 | Sep 3, 2025 | Improper verification of intent by SamsungExceptionalBroadcastReceiver in S Assistant prior to version 9.3.2 allows local attackers to modify itinerary information. | ||
| CVE-2021-25341 | Med | 0.26 | 4.0 | 0.00 | Mar 4, 2021 | Calling of non-existent provider in S Assistant prior to version 6.5.01.22 allows unauthorized actions including denial of service attack by hijacking the provider. |
- risk 0.35cvss 5.3epss 0.01
Improper access control vulnerability in S Assistant prior to version 7.5 allows attacker to remotely get senstive information.
- risk 0.33cvss 5.1epss 0.00
Improper verification of intent by ExternalBroadcastReceiver in S Assistant prior to version 9.3.2 allows local attackers to modify itinerary information.
- risk 0.33cvss 5.1epss 0.00
Improper verification of intent by SystemExceptionalBroadcastReceiver in S Assistant prior to version 9.3.2 allows local attackers to modify itinerary information.
- risk 0.33cvss 5.1epss 0.00
Improper verification of intent by SamsungExceptionalBroadcastReceiver in S Assistant prior to version 9.3.2 allows local attackers to modify itinerary information.
- risk 0.26cvss 4.0epss 0.00
Calling of non-existent provider in S Assistant prior to version 6.5.01.22 allows unauthorized actions including denial of service attack by hijacking the provider.