Vulnerability Details CVE-2025-20972
Improper verification of intent by broadcast receiver in Samsung Flow prior to version 4.9.17.6 allows local attackers to modify Samsung Flow configuration.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 6.0%
CVSS Severity
CVSS v3 Score 6.2
Products affected by CVE-2025-20972
-
-
cpe:2.3:a:samsung:flow:4.9.13.0
-
cpe:2.3:a:samsung:flow:4.9.15.7