CVE-2024-20865
MEDIUM 6.8EPSS 0.3%
Authentication bypass in bootloader prior to SMR May-2024 Release 1 allows physical attackers to flash arbitrary images.
- Affected
- Samsung Mobile · Samsung Mobile Devices
- CVSS v3.1 NVD
- 6.8 MEDIUM
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS v3.1 SAMSUNG
- 6.6 MEDIUM
CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - EPSS
- 0.32% chance of exploitation in the next 30 days, 23rd percentile
- Published
- 2024-05-07
- Updated
- 2024-08-01
Proof-of-concept exploits (1)
- quarkslab/samsung-bootchain-poc95★ · 2024-09-09