Description

Improper access control in Samsung Internet prior to version 13.2.1.70 allows physically proximate attackers to bypass the secret mode's authentication.

Related CPE's

a

samsung

internet

Vulnerable

References

https://security.samsungmobile.com/

Vendor Advisory

https://security.samsungmobile.com/serviceWeb.smsb

Not ApplicableVendor Advisory

Weaknesses

[email protected]

Primary
NVD-CWE-Other

[email protected]

Secondary
CWE-703

CVSS impact metrics

CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N

2.9 · Low

  • CVSS V3.1

  • CVSS V3.0

  • CVSS V2.0

Information

Source identifier

[email protected]

Vulnerability status

Analyzed

Published

2021-03-25T17:15:13.943

4 years ago

Last modified

2022-09-23T19:13:05.463

2 years ago