Lucene search

K
nvd[email protected]NVD:CVE-2024-20871
HistoryMay 07, 2024 - 5:15 a.m.

CVE-2024-20871

2024-05-0705:15:51
web.nvd.nist.gov
samsung keyboard
authorization vulnerability
bypass
factory reset protection

CVSS3

4.9

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L

AI Score

5

Confidence

High

EPSS

0

Percentile

9.0%

Improper authorization vulnerability in Samsung Keyboard prior to version One UI 5.1.1 allows physical attackers to partially bypass the factory reset protection.

CVSS3

4.9

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L

AI Score

5

Confidence

High

EPSS

0

Percentile

9.0%

Related for NVD:CVE-2024-20871