CVE-2019-17668

Опубликовано: 17 окт. 2019

Источник: nvd

CVSS3: 6.8

CVSS2: 4.4

EPSS Низкий

Описание

Samsung Galaxy S10 and Note10 devices allow unlock operations via unregistered fingerprints in certain situations involving a third-party screen protector.

Ссылки

https://news.ycombinator.com/item?id=21280205
Issue Tracking
Third Party Advisory
https://www.engadget.com/2019/10/17/samsung-patch-fingerprint-reader/
Press/Media Coverage
Third Party Advisory
https://www.forbes.com/sites/gordonkelly/2019/10/15/samsung-galaxy-s10-note10-plus-fingerprint-reader-warning-upgrade-galaxy-s11
Press/Media Coverage
Third Party Advisory
https://news.ycombinator.com/item?id=21280205
Issue Tracking
Third Party Advisory
https://www.engadget.com/2019/10/17/samsung-patch-fingerprint-reader/
Press/Media Coverage
Third Party Advisory
https://www.forbes.com/sites/gordonkelly/2019/10/15/samsung-galaxy-s10-note10-plus-fingerprint-reader-warning-upgrade-galaxy-s11
Press/Media Coverage
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:samsung:galaxy_s10_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:samsung:galaxy_s10:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:samsung:note_10_firmware:-:*:*:*:*:*:*:*

cpe:2.3:h:samsung:note_10:-:*:*:*:*:*:*:*

EPSS

Процентиль: 37%

0.00163

Низкий

6.8 Medium

CVSS3

4.4 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-gvc5-xjpw-3vvp

github

больше 3 лет назад