CVE-2022-28790

—

CVSS 3.1

3.3 low

EPSS

<1%p10

Published

May 3, 2022 (May 3, 2022)

Modified

Jun 17, 2026

Description

Improper authentication in Link to Windows Service prior to version 2.3.04.1 allows attacker to lock the device. The patch adds proper caller signature check logic.

Vendors: samsung
Products: link to windows service
Weakness: CWE-287
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.