Remote Authentication Bypass in Samsung Kies Air

CVE-2012-5858

Summary

The Samsung Kies Air application versions 2.1.207051 and 2.1.210161 are susceptible to an authentication bypass vulnerability. This occurs because the application relies solely on the IP address for authentication. Malicious actors can exploit this weakness by spoofing or gaining control over the IP address, enabling them to perform remote man-in-the-middle attacks that allow unauthorized access to sensitive phone contents.

References