Samsung Find My Mobile vulnerabilities

CVE-2023-42571 [HIGH] CVE-2023-42571: Abuse of remote unlock in Find My Mobile prior to version 7.3.13.4 allows physical attacker to unloc Abuse of remote unlock in Find My Mobile prior to version 7.3.13.4 allows physical attacker to unlock the device remotely by resetting the Samsung Account password with SMS verification when user lost the device.

CVE-2022-36878 [LOW] CWE-200 CVE-2022-36878: Exposure of Sensitive Information in Find My Mobile prior to version 7.2.25.14 allows local attacker Exposure of Sensitive Information in Find My Mobile prior to version 7.2.25.14 allows local attacker to access IMEI via log.

CVE-2022-33707 [MEDIUM] CWE-334 CVE-2022-33707: Improper identifier creation logic in Find My Mobile prior to version 7.2.24.12 allows attacker to i Improper identifier creation logic in Find My Mobile prior to version 7.2.24.12 allows attacker to identify the device.

CVE-2022-30741 [LOW] CWE-200 CVE-2022-30741: Sensitive information exposure vulnerability in SimChangeAlertManger of Find My Mobile prior to 7.2. Sensitive information exposure vulnerability in SimChangeAlertManger of Find My Mobile prior to 7.2.24.12 allows local attackers with log access permission to get sim card information through device log.

CVE-2022-30742 [LOW] CWE-200 CVE-2022-30742: Sensitive information exposure vulnerability in FmmExtraOperation of Find My Mobile prior to 7.2.24. Sensitive information exposure vulnerability in FmmExtraOperation of Find My Mobile prior to 7.2.24.12 allows local attackers with log access permissio to get sim card information through device log.