Samsung GALAXY Apps up to 4.4.01 Signature Validation SSL Certificate certificate validation

Summaryinfo

A vulnerability described as critical has been identified in Samsung GALAXY Apps up to 4.4.01. The impacted element is an unknown function of the component Signature Validation. The manipulation as part of SSL Certificate results in certificate validation. This vulnerability is identified as CVE-2018-20135. The attack can be executed remotely. There is not any exploit available.

Detailsinfo

A vulnerability was found in Samsung GALAXY Apps up to 4.4.01 (Smartphone Operating System). It has been classified as critical. Affected is an unknown code block of the component Signature Validation. The manipulation as part of a SSL Certificate leads to a certificate validation vulnerability. CWE is classifying the issue as CWE-295. The product does not validate, or incorrectly validates, a certificate. This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes:

Samsung Galaxy Apps before 4.4.01.7 allows modification of the hostname used for load balancing on installations of applications through a man-in-the-middle attack. An attacker may trick Galaxy Apps into using an arbitrary hostname for which the attacker can provide a valid SSL certificate, and emulate the API of the app store to modify existing apps at installation time. The specific flaw involves an HTTP method to obtain the load-balanced hostname that enforces SSL only after obtaining a hostname from the load balancer, and a missing app signature validation in the application XML. An attacker can exploit this vulnerability to achieve Remote Code Execution on the device. The Samsung ID is SVE-2018-12071.

The weakness was released 06/07/2019. This vulnerability is traded as CVE-2018-20135 since 12/13/2018. It is possible to launch the attack remotely. The exploitation doesn't require any form of authentication. There are neither technical details nor an exploit publicly available. The MITRE ATT&CK project declares the attack technique as T1587.003.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Type

• Smartphone Operating System

Vendor

• Samsung

Name

• GALAXY Apps

Version

• 4.4.01

License

• commercial

Website

• Vendor: https://www.samsung.com/

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion