PT-2020-14505 · Samsung · Cameralyzer

Published 2020-07-07 · Updated 2023-12-23 · CVE-2020-15577

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with P(9.0) and Q(10.0) software

Description An issue was discovered that allows attackers to write files to the SD card using Cameralyzer. This affects Samsung mobile devices with P(9.0) and Q(10.0) software.

Recommendations For Samsung mobile devices with P(9.0) software, uninstall or disable Cameralyzer to prevent attackers from writing files to the SD card. For Samsung mobile devices with Q(10.0) software, uninstall or disable Cameralyzer to prevent attackers from writing files to the SD card. As a temporary workaround, consider restricting access to the SD card to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2020-15577

Affected Products

Cameralyzer

References · 5

• https://osv.dev/vulnerability/CVE-2020-15577 · Vendor Advisory
• https://security.samsungmobile.com/securityUpdate.smsb · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-15577 · Security Note
• https://twitter.com/AristotleJ22855/status/1738770410848854458 · Twitter Post
• https://t.me/cvenotify/4921 · Telegram Post