The Remote Controls feature on Samsung mobile devices does not validate the source of lock-code data received over a network, which makes it easier for remote attackers to cause a denial of service (screen locking with an arbitrary code) by triggering unexpected Find My Mobile network traffic.
References
Link | Resource |
---|---|
https://www.youtube.com/watch?v=YufuOYQoDOY | Exploit |
https://www.youtube.com/watch?v=Q3adkpOEjyI | Exploit |
Configurations
Configuration 1 (hide)
AND |
|
Information
Published : 2014-10-24 03:55
Updated : 2014-10-24 07:24
NVD link : CVE-2014-8346
Mitre link : CVE-2014-8346
JSON object : View
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')
Products Affected
samsung
- mobile
- findmymobile