PT-2020-15908 · Samsung · Oneui+2

Published 2020-08-31 · Updated 2021-07-21 · CVE-2020-25048

Positive Technologies (AI Summary)

CVSS v3.1

4.6

Medium

Base vector

AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with Q(10.0) (with ONEUI 2.1) software

Description An issue was discovered that allows unauthenticated downloads, also known as file injection, through the Quick Share feature when the device is in the Lockscreen state.

Recommendations For Samsung mobile devices with Q(10.0) (with ONEUI 2.1) software, consider disabling the Quick Share feature when the device is in the Lockscreen state as a temporary workaround until a patch is available.

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2020-25048

Affected Products

Oneui

Quick Share

Samsung Mobile Devices

References · 3

• https://osv.dev/vulnerability/CVE-2020-25048 · Vendor Advisory
• https://security.samsungmobile.com/securityUpdate.smsb · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-25048 · Security Note