PT-2020-8726 · Samsung · Dex Station+1

Published 2020-04-08 · Updated 2020-04-10 · CVE-2018-21082

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Samsung mobile devices with N(7.x) software

Description An issue was discovered that allows App Pinning bypass and lock-screen bypass via the "Use screen lock type to unpin" option in Dex Station.

Recommendations For Samsung mobile devices with N(7.x) software, consider disabling the Use screen lock type to unpin option in Dex Station as a temporary workaround until a patch is available. Restrict access to Dex Station to minimize the risk of exploitation.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2018-21082

Affected Products

Dex Station

Samsung Mobile Devices

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2018-21082 · Security Note
• https://security.samsungmobile.com/securityUpdate.smsb · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-21082 · Vendor Advisory
• https://t.me/cvenotify/2541 · Telegram Post