PT-2024-18761 · Samsung · Samsung Data Store

Hackhackdump · Published 2024-04-02 · Updated 2024-04-03 · CVE-2024-20851

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Samsung Data Store versions prior to 5.3.00.4

Description The issue is related to improper access control in Samsung Data Store, allowing local attackers to launch arbitrary activities with the privilege of Samsung Data Store.

Recommendations For versions prior to 5.3.00.4, update to version 5.3.00.4 or later to resolve the issue.

Fix

Related Identifiers

CVE-2024-20851

Affected Products

Samsung Data Store

References · 4

• https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=04 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-20851 · Security Note
• https://osv.dev/vulnerability/CVE-2024-20851 · Vendor Advisory
• https://twitter.com/RedPacketSec/status/1775449358835634288 · Twitter Post