samsung Vulnerabilities and Affected Products
Vulnerabilities associated with samsung_mobile_devices.
Products
Clear product- android44 vulnerabilities
- SmartThings Hub STH-ETH-25023 vulnerabilities
- Mobile Devices13 vulnerabilities
- Samsung11 vulnerabilities
- exynos_13809 vulnerabilities
- exynos_13308 vulnerabilities
- exynos_12807 vulnerabilities
- exynos_8507 vulnerabilities
- exynos_9806 vulnerabilities
- notes5 vulnerabilities
- samsung_mobile_devices5 vulnerabilities
- exynos_22004 vulnerabilities
- exynos_980_firmware4 vulnerabilities
- magician4 vulnerabilities
- exynos_10803 vulnerabilities
- exynos_1380_firmware3 vulnerabilities
- exynos_21003 vulnerabilities
- exynos_w9203 vulnerabilities
- Galaxy S93 vulnerabilities
- Samsung Galaxy Apps3 vulnerabilities
- exynos_1280_firmware2 vulnerabilities
- exynos_1330_firmware2 vulnerabilities
- exynos_14802 vulnerabilities
- exynos_850_firmware2 vulnerabilities
- exynos_91102 vulnerabilities
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2024-34587HIGH | Improper input validation in parsing application information from RTCP packet in librtp.so prior to SMR Jul-2024 Release 1 allows remote attackers to execute arbitrary code with system privilege. User interaction is required for triggering this vulnerability. CWE-1288Jul 2, 2024 | CVSS7.5v3.1 | EPSS0.522% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-20895HIGH | Improper access control in Dar service prior to SMR Jul-2024 Release 1 allows local attackers to bypass restriction for calling SDP features. CWE-284Jul 2, 2024 | CVSS7.7v3.1 | EPSS0.143% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-20865MEDIUM | Authentication bypass in bootloader prior to SMR May-2024 Release 1 allows physical attackers to flash arbitrary images. CWE-287May 7, 2024 | CVSS6.6v3.1 | EPSS0.317% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-20863MEDIUM | Out of bounds write vulnerability in SNAP in HAL prior to SMR May-2024 Release 1 allows local privileged attackers to execute arbitrary code. CWE-787May 7, 2024 | CVSS6.7v3.1 | EPSS0.192% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2023-30691HIGH | Parcel mismatch in AuthenticationConfig prior to SMR Aug-2023 Release 1 allows local attacker to privilege escalation. | CVSS8.4v3.1 | EPSS0.171% | PoCs0 | SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |