Lucene search

SamsungMobileVULNRICHMENT:CVE-2024-20871

HistoryMay 07, 2024 - 4:28 a.m.

CVE-2024-20871

2024-05-0704:28:59

SamsungMobile

github.com

samsung keyboard

factory reset protection

authorization vulnerability

physical attackers

CVSS3

4.9

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L

AI Score

6.6

Confidence

Low

EPSS

Percentile

9.0%

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

Improper authorization vulnerability in Samsung Keyboard prior to version One UI 5.1.1 allows physical attackers to partially bypass the factory reset protection.

CNA Affected

[
  {
    "vendor": "Samsung Mobile",
    "product": "Samsung Keyboard",
    "versions": [
      {
        "status": "unaffected",
        "version": "One UI 5.1.1"
      }
    ],
    "defaultStatus": "affected"
  }
]

References

security.samsungmobile.com/serviceWeb.smsb?year=2024&month=05

CVSS3

4.9

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

LOW

CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L

AI Score

6.6

Confidence

Low

EPSS

Percentile

9.0%

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

Related for VULNRICHMENT:CVE-2024-20871