CVE-2022-44636
The Samsung TV (2021 and 2022 model) smart remote control allows attackers to enable microphone...
The Samsung TV (2021 and 2022 model) smart remote control allows attackers to enable microphone access via Bluetooth spoofing when a user is activating remote control by pressing a button. This is fixed in xxx72510, E9172511 for 2021 models, xxxA1000, 4x2A0200 for 2022 models.
Attack profile
How easy it is to exploit
- Attack vector
- Adjacent network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- Low
- Integrity
- Low
- Availability
- None
Exploit likelihood
What each source reports
NVD Score used
The Samsung TV (2021 and 2022 model) smart remote control allows attackers to enable microphone access via Bluetooth spoofing when a user is activating remote control by pressing a button. This is fixed in xxx72510, E9172511 for 2021 models, xxxA1000, 4x2A0200 for 2022 models.
- Record
CVE-2022-44636- CVSS 3.1
- 4.6 Medium
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N - Weakness
- CWE-290
- Updated
- 2026-11-02
CVE List
The Samsung TV (2021 and 2022 model) smart remote control allows attackers to enable microphone access via Bluetooth spoofing when a user is activating remote control by pressing a button. This is fixed in xxx72510, E9172511 for 2021 models, xxxA1000, 4x2A0200 for 2022 models.
- Record
CVE-2022-44636- CVSS 3.1
- 4.6 Medium
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N - Weakness
- CWE-290
- Updated
- 2026-11-02
EUVDEUVD-2022-47572
The Samsung TV (2021 and 2022 model) smart remote control allows attackers to enable microphone access via Bluetooth spoofing when a user is activating remote control by pressing a button. This is fixed in xxx72510, E9172511 for 2021 models, xxxA1000, 4x2A0200 for 2022 models.
- Record
EUVD-2022-47572- CVSS 3.1
- 4.6 Medium
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-63g5-x8w2-4383
The Samsung TV (2021 and 2022 model) smart remote control allows attackers to enable microphone...
The Samsung TV (2021 and 2022 model) smart remote control allows attackers to enable microphone access via Bluetooth spoofing when a user is activating remote control by pressing a button. This is fixed in xxx72510, E9172511 for 2021 models, xxxA1000, 4x2A0200 for 2022 models.
- Record
GHSA-63g5-x8w2-4383- CVSS 3.1
- 4.6 Medium
CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N - Weakness
- CWE-290
- Updated
- 2026-11-02
Affected products
- samsung t-ksu2eakuc firmware
- samsung t-ksu2edeuc firmware
- samsung t-ksu2euab firmware
- samsung t-nklakuc firmware
- samsung t-nkldeuc firmware
- samsung t-nkluabc firmware
- samsung t-nkm2akuc firmware
- samsung t-nkm2deuc firmware
- samsung t-nkm2uabc firmware
- samsung t-oscpakuc firmware
- samsung t-oscpdeuc firmware
- samsung t-oscpuabc firmware
Show 3 moreShow less
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2022-44636 is a medium vulnerability (CVSS 4.6) in Samsung T-ksu2eakuc Firmware, published December 13, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.25%, the 17th percentile. No source names a fixed version.