What’s Vulnerable › Vulnerabilities

CVE-2022-44636

• Severity: medium (CVSS 4.6 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-12-13 · updated 2026-06-17
• Weakness: CWE-290

Description

The Samsung TV (2021 and 2022 model) smart remote control allows attackers to enable microphone access via Bluetooth spoofing when a user is activating remote control by pressing a button. This is fixed in xxx72510, E9172511 for 2021 models, xxxA1000, 4x2A0200 for 2022 models.

Affected products

• Samsung T-Ksu2Eakuc Firmware: all versions
• Samsung T-Ksu2Edeuc Firmware: all versions
• Samsung T-Ksu2Euab Firmware: all versions
• Samsung T-Nklakuc Firmware: all versions
• Samsung T-Nkldeuc Firmware: all versions
• Samsung T-Nkluabc Firmware: all versions
• Samsung T-Nkm2Akuc Firmware: all versions
• Samsung T-Nkm2Deuc Firmware: all versions
• Samsung T-Nkm2Uabc Firmware: all versions
• Samsung T-Oscpakuc Firmware: all versions
• Samsung T-Oscpdeuc Firmware: all versions
• Samsung T-Oscpuabc Firmware: all versions
• Samsung T-Ptmakuc Firmware: all versions
• Samsung T-Ptmdeuc Firmware: all versions
• Samsung T-Ptmuabc Firmware: all versions

References

• https://samsung.com
• https://samsungtvbounty.com/securityUpdates
• https://samsung.com
• https://samsungtvbounty.com/securityUpdates

Get alerted when CVE-2022-44636 or the next vulnerability affects your stack