PT-2020-10589 · Samsung · Contacts Application+1

Published 2020-03-24 · Updated 2020-03-30 · CVE-2019-20613

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with N(7.x) software Samsung mobile devices with O(8.x) software

Description An issue was discovered in the Contacts application of Samsung mobile devices, where a time-based SQL injection is present.

Recommendations For Samsung mobile devices with N(7.x) software, update to a version that includes the fix for this issue. For Samsung mobile devices with O(8.x) software, update to a version that includes the fix for this issue. As a temporary workaround, consider restricting access to the Contacts application until a patch is available.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2019-20613

Affected Products

Contacts Application

Samsung Mobile Devices

References · 3

• https://security.samsungmobile.com/securityUpdate.smsb · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-20613 · Security Note
• https://osv.dev/vulnerability/CVE-2019-20613 · Vendor Advisory