PT-2024-18782 · Samsung · Samsung Keyboard

Netkingj + 1 · Published 2024-05-07 · Updated 2024-05-07 · CVE-2024-20871

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Medium

Base vector

AV:P/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L

Name of the Vulnerable Software and Affected Versions Samsung Keyboard versions prior to One UI 5.1.1

Description The issue is related to an improper authorization vulnerability that allows physical attackers to partially bypass the factory reset protection. This vulnerability can be exploited by physical attackers.

Recommendations For versions prior to One UI 5.1.1, update to version One UI 5.1.1 or later to resolve the issue. As a temporary workaround, consider restricting physical access to devices until the update can be applied.

Fix

Related Identifiers

CVE-2024-20871

Affected Products

Samsung Keyboard

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2024-20871 · Security Note
• https://security.samsungmobile.com/serviceWeb.smsb?year=2024&month=05 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-20871 · Vendor Advisory
• https://t.me/cvenotify/79351 · Telegram Post
• https://twitter.com/CVEnew/status/1787888380094636048 · Twitter Post