CVE-2020-28340

An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), Q(10.0), and R(11.0) software

published November 8, 2020

CVSS
—
EPSS
0%
Percentile
38.5
In the wild
Unconfirmed
What it is

⚠️ Here's a surprising twist: attackers can waltz right past Factory Reset Protection (FRP) on specific Samsung devices using the Secure Folder! Imagine a hotel with a secure vault for guests' valuables. If someone discovers a backdoor to the vault, they could easily access all the hidden treasures inside, bypassing the security measures put in place. With this vulnerability, an attacker could gain access to sensitive data stored in the Secure Folder without needing the usual authentication methods. This could mean unauthorized access to photos, documents, and personal information, leading to a serious breach of privacy.

Put simply

Imagine a hotel with a secure vault for guests' valuables. If someone discovers a backdoor to the vault, they could easily access all the hidden treasures inside, bypassing the security measures put in place. This issue allows attackers to bypass Factory Reset Protection (FRP) on Samsung devices running O(8.x), P(9.0), Q(10.0), and R(11.0) software via the Secure Folder, compromising the integrity of user data.

What to do

With this vulnerability, an attacker could gain access to sensitive data stored in the Secure Folder without needing the usual authentication methods. This could mean unauthorized access to photos, documents, and personal information, leading to a serious breach of privacy. To protect against this vulnerability, check for any available software updates from Samsung and apply them immediately. Additionally, ensure that your device settings are configured to maximize security and privacy. It's also wise to regularly review what data is stored in the Secure Folder. You've got this! Stay proactive and keep your device secure! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00455 · 38.5th percentile
Published
2020-11-08T04:03Z
EPSS history
Timeline
  • 08 NOV 04:03Z
    An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), Q(10.0), and R(11.0) software
    cvelistv5