CVE-2020-35550

An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), Q(10.0), and R(11.0) software

published December 18, 2020

CVSS
—
EPSS
1%
Percentile
48.3
In the wild
Unconfirmed
What it is

⚠️ A simple swipe down on the Status Bar can let attackers dodge Factory Reset Protection on Samsung devices running several Android versions! 🚨 Think of it like a security guard who forgets to check an ID when someone waves a badge in their face—if the badge looks good enough, they get in, no questions asked! This vulnerability allows attackers to bypass security measures that are meant to protect user data after a factory reset. Without these safeguards, stolen devices could be easily accessed, exposing personal information and making identity theft devastatingly simple.

Put simply

Think of it like a security guard who forgets to check an ID when someone waves a badge in their face—if the badge looks good enough, they get in, no questions asked! CVE-2020-35550 enables attackers to exploit a flaw in the StatusBar functionality on Samsung devices, allowing them to skip the Factory Reset Protection that prevents unauthorized access to the device after a reset.

What to do

This vulnerability allows attackers to bypass security measures that are meant to protect user data after a factory reset. Without these safeguards, stolen devices could be easily accessed, exposing personal information and making identity theft devastatingly simple. To secure your devices, ensure your Samsung mobile is updated to the latest available software version. Regularly check for updates and consider enabling additional security features like biometric locks or strong passwords. You've got this! Stay vigilant and keep your devices secure. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00605 · 48.3th percentile
Published
2020-12-18T08:45Z
EPSS history
Timeline
  • 18 DEC 08:45Z
    An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), Q(10.0), and R(11.0) software
    cvelistv5