PT-2020-13715 · Samsung+1 · Secure Folder+1

Published 2020-06-04 · Updated 2020-06-07 · CVE-2020-13834

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with O(8.x) Samsung mobile devices with P(9.0) Samsung mobile devices with Q(10.0) (with TEEGRIS)

Description An issue was discovered where Secure Folder does not properly restrict use of Android Debug Bridge (adb) for arbitrary installations.

Recommendations For Samsung mobile devices with O(8.x), update the Secure Folder to restrict arbitrary installations via Android Debug Bridge (adb). For Samsung mobile devices with P(9.0), update the Secure Folder to restrict arbitrary installations via Android Debug Bridge (adb). For Samsung mobile devices with Q(10.0) (with TEEGRIS), update the Secure Folder to restrict arbitrary installations via Android Debug Bridge (adb).

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2020-13834

Affected Products

Android Debug Bridge

Secure Folder

References · 3

• https://security.samsungmobile.com/securityUpdate.smsb · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-13834 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-13834 · Security Note