Samsung Update Local Privilege Escalation Vulnerability
CVE-2020-7811

6.2MEDIUM

Key Information:

Vendor

Samsung Electronics

Status
Samsung Update
Vendor
CVE Published:
12 October 2020

What is CVE-2020-7811?

Samsung Update 3.0.2.0 ~ 3.0.32.0 has a vulnerability that allows privilege escalation as commands crafted by attacker are executed while the engine deserializes the data received during inter-process communication

Affected Version(s)

Samsung Update Windows OS 3.0.2.0 <= 3.0.32.0

References

https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_w...
x_refsource_MISC

CVSS V3.1

Score:
6.2
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Thanks to Yong Hwi Jin for reporting this vulnerability
.