PT-2025-4174 · Smr · Smr

Andrea Toska · Published 2025-02-04 · Updated 2025-02-12 · CVE-2025-20892

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions SMR versions prior to January 2025 Release 1

Description A failure in the protection mechanism of the bootloader allows physical attackers to execute the fastboot command. User interaction is required to trigger this issue.

Recommendations For versions prior to January 2025 Release 1, update to a version that includes the fix for this issue to prevent physical attackers from executing the fastboot command. As a temporary workaround, consider restricting physical access to devices to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2025-20892

Affected Products

Smr

References · 7

• https://security.samsungmobile.com/securityUpdate.smsb?year=2025&month=01 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-20892 · Security Note
• https://osv.dev/vulnerability/CVE-2025-20892 · Vendor Advisory
• https://t.me/cvenotify/111048 · Telegram Post
• https://twitter.com/CVEnew/status/1886680228896104921 · Twitter Post
• https://t.me/cvenotify/109827 · Telegram Post
• https://t.me/cvedetector/17169 · Telegram Post