CVE-2025-20894: Medium severity samsung email vulnerability
Published Feb 4, 2025
·Updated
Improper access control in Samsung Email prior to version 6.1.97.1 allows physical attackers to access data across multiple user profiles.
Affected Software
2 affected components
Samsung Email<6.1.97.1
Samsung Email<6.1.97.1
Event History
Feb 4, 2025
CVE Published
via MITRE·07:19 AM
Data Sourced
via MITRE·07:19 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:15 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-20894?
CVE-2025-20894 is considered a high-severity vulnerability due to improper access control that allows unauthorized data access across user profiles.
2
How do I fix CVE-2025-20894?
To fix CVE-2025-20894, update Samsung Email to version 6.1.97.1 or later.
3
What are the potential impacts of CVE-2025-20894?
The potential impact of CVE-2025-20894 includes unauthorized access to sensitive data stored in multiple user profiles.
4
Who is affected by CVE-2025-20894?
Users of Samsung Email versions prior to 6.1.97.1 are affected by CVE-2025-20894.
5
Is there a workaround for CVE-2025-20894?
There is no official workaround for CVE-2025-20894; updating to the latest version is recommended for mitigation.