Vulnerability Details CVE-2019-17668
Samsung Galaxy S10 and Note10 devices allow unlock operations via unregistered fingerprints in certain situations involving a third-party screen protector.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 38.3%
CVSS Severity
CVSS v3 Score 6.8
CVSS v2 Score 4.4
References
- https://news.ycombinator.com/item?id=21280205
- https://www.engadget.com/2019/10/17/samsung-patch-fingerprint-reader/
- https://www.forbes.com/sites/gordonkelly/2019/10/15/samsung-galaxy-s10-note10-plus-fingerprint-reader-warning-upgrade-galaxy-s11
- https://news.ycombinator.com/item?id=21280205
- https://www.engadget.com/2019/10/17/samsung-patch-fingerprint-reader/
- https://www.forbes.com/sites/gordonkelly/2019/10/15/samsung-galaxy-s10-note10-plus-fingerprint-reader-warning-upgrade-galaxy-s11
Products affected by CVE-2019-17668
-
cpe:2.3:h:samsung:galaxy_s10:-
-
cpe:2.3:h:samsung:note_10:-
-
cpe:2.3:o:samsung:galaxy_s10_firmware:-
-
cpe:2.3:o:samsung:note_10_firmware:-