PT-2020-10582 · Samsung · Samsung Mobile Devices

Published 2020-03-24 · Updated 2021-07-21 · CVE-2019-20606

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions Samsung mobile devices (affected versions not specified), but all versions with software before May 2019 are affected.

Description A phishing attack can be used to change network and internet settings on affected devices by targeting OMACP.

Recommendations For all affected versions, apply the May 2019 software update or later to resolve the issue.

Fix

Related Identifiers

CVE-2019-20606

Affected Products

Samsung Mobile Devices

References · 2

• https://security.samsungmobile.com/securityUpdate.smsb · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-20606 · Security Note