PT-2024-20072 · Samsung · Samsung Magician

Published 2024-02-07 · Updated 2024-02-15 · CVE-2024-23769

Positive Technologies (AI Summary)

CVSS v3.1

7.3

High

Base vector

AC:L/AV:L/A:H/C:H/I:H/PR:L/S:U/UI:R

Name of the Vulnerable Software and Affected Versions Samsung Magician PC Software version 8.0.0

Description The issue is related to improper privilege control for a named pipe, allowing a local attacker to read privileged data. This could potentially lead to unauthorized access to sensitive information.

Recommendations For Samsung Magician PC Software version 8.0.0, consider restricting access to the named pipe until a patch is available. As a temporary workaround, limiting the privileges of the software or the user account running it may help minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2024-23769

Affected Products

Samsung Magician

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2024-23769 · Security Note
• https://osv.dev/vulnerability/CVE-2024-23769 · Vendor Advisory
• https://semiconductor.samsung.com/support/quality-support/product-security-updates · Vendor Advisory
• https://t.me/cvenotify/71583 · Telegram Post
• https://twitter.com/CVEnew/status/1755311157483839729 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1755350692791779419 · Twitter Post
• https://t.me/cvenotify/70483 · Telegram Post
• https://t.me/cvenotify/70501 · Telegram Post