PT-2020-17346 · Samsung · Samsung Mobile Devices

Published 2020-12-18 · Updated 2020-12-18 · CVE-2020-35553

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with Q(10.0) and R(11.0) software

Description An issue was discovered that allows attackers to cause a denial of service (unlock failure) by triggering a power-shortage incident that causes a false-positive attack detection.

Recommendations For Samsung mobile devices with Q(10.0) software, update to a version that addresses the issue. For Samsung mobile devices with R(11.0) software, update to a version that addresses the issue. As a temporary workaround, consider implementing power management measures to minimize the risk of power-shortage incidents that could trigger false-positive attack detections.

Fix

Weakness Enumeration

CWE-920

Related Identifiers

CVE-2020-35553

Affected Products

Samsung Mobile Devices

References · 5

• https://security.samsungmobile.com/securityUpdate.smsb · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-35553 · Security Note
• https://osv.dev/vulnerability/CVE-2020-35553 · Vendor Advisory
• https://t.me/cvenotify/7326 · Telegram Post
• https://t.me/cvenotify/7383 · Telegram Post