Design/Logic Flaw

2020-01-2213:15:00

PRIOn knowledge base

www.prio-n.com

8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.9%

JSON

The system-popup system service in Tizen allows an unprivileged process to perform popup-related system actions, due to improper D-Bus security policy configurations. Such actions include the triggering system poweroff menu, and prompting a popup with arbitrary strings. This affects Tizen before 5.0 M1, and Tizen-based firmwares including Samsung Galaxy Gear series before build RE2.

CPENameOperatorVersion
tizeneq1.0 m1
tizeneq1.0
tizeneq2.0
tizeneq2.1
tizeneq2.2
tizeneq2.2.1
tizeneq2.3
tizeneq2.3.1
tizeneq2.4
tizeneq3.0 m2

Name	Operator	Version
tizen	eq	1.0 m1
tizen	eq	1.0
tizen	eq	2.0
tizen	eq	2.1
tizen	eq	2.2
tizen	eq	2.2.1
tizen	eq	2.3
tizen	eq	2.3.1
tizen	eq	2.4
tizen	eq	3.0 m2

Rows per page:

1-10 of 161

References

media.defcon.org/DEF%20CON%2026/DEF%20CON%2026%20presentations/Dongsung%20Kim%20and%20Hyoung%20Kee%20Choi%20-%20Updated/DEFCON-26-Dongsung-Kim-and-Hyoung-Kee-Choi-Your-Watch-Can-Watch-You-Updated.pdf

review.tizen.org/git/?p=platform/core/system/system-popup.git;a=commit;h=57b3c2f3cd61c6f432e7abe3a2d8b0df72fd4b0e

www.youtube.com/watch?v=3IdgBwbOT-g&feature=youtu.be