CVE-2022-44636
Estado: ModificadaMedia (4.6)—
The Samsung TV (2021 and 2022 model) smart remote control allows attackers to enable microphone access via Bluetooth spoofing when a user is activating remote control by pressing a button. This is fixed in xxx72510, E9172511 for 2021 models, xxxA1000, 4x2A0200 for 2022 models.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
- Puntuación base: 4.6
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.25%
- Percentil entre todas las CVEs puntuadas: 15
- Fecha de la puntuación: 4/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (15)
Samsung — T-ksu2eakuc FirmwareSamsung — T-ksu2edeuc FirmwareSamsung — T-ksu2euab FirmwareSamsung — T-nklakuc FirmwareSamsung — T-nkldeuc FirmwareSamsung — T-nkluabc FirmwareSamsung — T-nkm2akuc FirmwareSamsung — T-nkm2deuc FirmwareSamsung — T-nkm2uabc FirmwareSamsung — T-oscpakuc FirmwareSamsung — T-oscpdeuc FirmwareSamsung — T-oscpuabc FirmwareSamsung — T-ptmakuc FirmwareSamsung — T-ptmdeuc FirmwareSamsung — T-ptmuabc Firmware
CWE
- NVD-CWE-noinfo
- CWE-290
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2022-44636",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2022-44636",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"version": "2.0.3",
"timestamp": "2025-04-22T03:22:01.240790Z"
}
}
],
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 4.6,
"attackVector": "ADJACENT_NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"integrityImpact": "LOW",
"userInteraction": "REQUIRED",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "NONE",
"confidentialityImpact": "LOW"
},
"impactScore": 2.5,
"exploitabilityScore": 2.1
},
{
"type": "Secondary",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 4.6,
"attackVector": "ADJACENT_NETWORK",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"integrityImpact": "LOW",
"userInteraction": "REQUIRED",
"attackComplexity": "LOW",
"availabilityImpact": "NONE",
"privilegesRequired": "NONE",
"confidentialityImpact": "LOW"
},
"impactScore": 2.5,
"exploitabilityScore": 2.1
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2022-12-13T15:15:11.160",
"references": [
{
"url": "https://samsung.com",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "https://samsungtvbounty.com/securityUpdates",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "https://samsung.com",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://samsungtvbounty.com/securityUpdates",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
},
{
"type": "Secondary",
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"description": [
{
"lang": "en",
"value": "CWE-290"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The Samsung TV (2021 and 2022 model) smart remote control allows attackers to enable microphone access via Bluetooth spoofing when a user is activating remote control by pressing a button. This is fixed in xxx72510, E9172511 for 2021 models, xxxA1000, 4x2A0200 for 2022 models."
},
{
"lang": "es",
"value": "El control remoto inteligente de Samsung TV (modelos 2021 y 2022) permite a los atacantes habilitar el acceso al micrófono mediante suplantación de Bluetooth cuando un usuario activa el control remoto presionando un botón. Esto se soluciona en xxx72510, E9172511 para los modelos 2021, xxxA1000, 4x2A0200 para los modelos 2022."
}
],
"lastModified": "2026-06-17T05:08:39.260",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:samsung:t-oscpakuc_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F90116F4-DD37-44EA-9DD3-6FA9490E44FA"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:samsung:t-oscpakuc:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "DF1B2668-A879-4857-9E45-B9CD81AED6ED"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:samsung:t-oscpdeuc_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "65B10C3F-D00E-4B63-A838-82321DBB81F2"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:samsung:t-oscpdeuc:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "30A602FD-B419-4A5E-8EA3-CDD3BE920CAB"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:samsung:t-oscpuabc_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5A498F84-9044-411A-80C5-D51AD3245891"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:samsung:t-oscpuabc:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "ED43A091-B0DB-449C-9E00-AFBC3F18B03C"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:samsung:t-nkm2akuc_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EA344642-AE25-4A41-88B9-322DBFD16644"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:samsung:t-nkm2akuc:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D216AF32-009D-4655-B748-E2AC6E5B7361"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:samsung:t-nkm2deuc_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6D084023-2C5A-432B-A7E3-0F9E1CAC8472"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:samsung:t-nkm2deuc:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "211B3D00-799F-42BE-A95A-C63AB4B16210"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:samsung:t-nkm2uabc_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ED219CDD-4D89-4F41-976D-A5084DD012CB"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:samsung:t-nkm2uabc:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "0218C76A-7637-401C-9E29-46975C28558C"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:samsung:t-nklakuc_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B48648B2-4130-49BA-B7DB-9425002E14D1"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:samsung:t-nklakuc:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C688779C-C2B1-4CBE-BFB5-EDB4A2E1E96F"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:samsung:t-nkldeuc_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "51A3B553-5E45-4A39-AD82-7F67BF4A6073"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:samsung:t-nkldeuc:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "9EC14B8C-85D0-4CB2-89B8-1C890C79BC9D"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:samsung:t-nkluabc_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A9C6E7FC-EF5B-485F-9665-DBD869331847"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:samsung:t-nkluabc:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "5B206A0D-F641-4160-844A-58C4B0724F6D"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:samsung:t-ksu2eakuc_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7C766FF5-325A-4B49-83AC-C4DE5AB7FF0C"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:samsung:t-ksu2eakuc:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "46365D28-5E75-405A-94EC-F1AFDFE6A6BF"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:samsung:t-ksu2edeuc_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8241E7C9-E71B-491A-B4B9-FA86F8FD4C83"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:samsung:t-ksu2edeuc:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "EF3CE269-DA67-4BE4-85F4-6005F2C90298"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:samsung:t-ksu2euab_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "792618EF-0869-4A31-9CA5-189A6C5CB3CD"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:samsung:t-ksu2euab:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D1165773-4CAB-476B-8F1D-45A5787F3E1C"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:samsung:t-ptmakuc_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "71669527-9880-4DFB-BCBE-F58BF3FD427E"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:samsung:t-ptmakuc:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "E6E9A465-E076-4947-8897-77CF40F58A8B"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:samsung:t-ptmdeuc_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1EFE5C7A-01D2-4B30-80F5-B904D206675C"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:samsung:t-ptmdeuc:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "FE542507-DC30-489F-AC66-C79632653DC9"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:samsung:t-ptmuabc_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "490F5EA9-8E68-4D8B-B706-CE67EB0185D3"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:samsung:t-ptmuabc:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B2119E4B-6934-4844-8B66-C1B5747C197D"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "cve@mitre.org"
}