PT-2018-17302 · Samsung · Samsung Display Solutions App

Yakov Shafranovich · Published 2018-03-06 · Updated 2019-10-03 · CVE-2018-6019

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Samsung Display Solutions App versions prior to 3.02

Description The issue allows man-in-the-middle attackers to spoof B2B content by leveraging the failure to use encryption during information transmission.

Recommendations For versions prior to 3.02, update to version 3.02 or later to resolve the issue.

Fix

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-319

Related Identifiers

CVE-2018-6019

Affected Products

Samsung Display Solutions App

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2018-6019 · Security Note
• https://osv.dev/vulnerability/CVE-2018-6019 · Vendor Advisory
• https://wwws.nightwatchcybersecurity.com/2018/03/01/content-injection-in-samsung-display-solutions-application-for-android-cve-2018-6019 · Note