PT-2019-13828 · Samsung · Fotaagent

Edward Flanker + 1 · Published 2019-08-08 · Updated 2023-03-29 · CVE-2019-14783

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with N(7.x) software Samsung mobile devices with O(8.x) software Samsung mobile devices with P(9.0) software

Description The issue allows a malicious application to create privileged files through the FotaAgent component. This could potentially lead to unauthorized access or modifications to sensitive data.

Recommendations For Samsung mobile devices with N(7.x) software, update to a version that includes the fix for this issue. For Samsung mobile devices with O(8.x) software, update to a version that includes the fix for this issue. For Samsung mobile devices with P(9.0) software, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting the privileges of the FotaAgent component to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2019-14783

Affected Products

Fotaagent

References · 8

• https://osv.dev/vulnerability/CVE-2019-14783 · Vendor Advisory
• https://security.samsungmobile.com/securityUpdate.smsb · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-14783 · Security Note
• https://t.me/cybersecuritytechnologies/465 · Telegram Post
• http://seclists.org/fulldisclosure/2019/Sep/33 · Note
• https://t.me/cvenotify/47094 · Telegram Post
• https://t.me/defcon_news/25548 · Telegram Post
• http://packetstormsecurity.com/files/154615/Samsung-Mobile-Android-FotaAgent-Arbitrary-File-Creation.html · Note