PT-2019-13828 · Samsung · Fotaagent

Edward Flanker + 1 · Publicado 2019-08-08 · Atualizado 2023-03-29 · CVE-2019-14783

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Média

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with N(7.x) software Samsung mobile devices with O(8.x) software Samsung mobile devices with P(9.0) software

Description The issue allows a malicious application to create privileged files through the FotaAgent component. This could potentially lead to unauthorized access or modifications to sensitive data.

Recommendations For Samsung mobile devices with N(7.x) software, update to a version that includes the fix for this issue. For Samsung mobile devices with O(8.x) software, update to a version that includes the fix for this issue. For Samsung mobile devices with P(9.0) software, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting the privileges of the FotaAgent component to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2019-14783

Produtos afetados

Fotaagent

Referências · 8

• https://t.me/cybersecuritytechnologies/465 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2019-14783 · Aviso do Fabricante
• http://seclists.org/fulldisclosure/2019/Sep/33 · Nota
• https://security.samsungmobile.com/securityUpdate.smsb · Aviso do Fabricante
• https://t.me/cvenotify/47094 · Publicação no Telegram
• https://t.me/defcon_news/25548 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2019-14783 · Nota de Segurança
• http://packetstormsecurity.com/files/154615/Samsung-Mobile-Android-FotaAgent-Arbitrary-File-Creation.html · Nota