CVE-2025-20894 — Improper access control in Samsung Email prior to version 6.1.97.1 allows physic... | CVE Daily

Medium CVSS 4.6

Overview

Improper access control in Samsung Email prior to version 6.1.97.1 allows physical attackers to access data across multiple user profiles.

CWE: N/A Published: 2025-02-04T08:15:30.673

Risk analysis

This vulnerability is rated 🟡 MEDIUM.

CVSS: 4.6 (MEDIUM)
Detected tags: misconfiguration (tag impact: LOW)

Recommended actions:

Prioritize remediation based on business criticality and exposure.
Limit exposure and increase monitoring until fixed.

Recommended tools

Tags

Security Misconfiguration