CVE-2020-35550: Critical severity android vulnerability

Published Dec 18, 2020

Updated

An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), Q(10.0), and R(11.0) software. Attackers can bypass Factory Reset Protection (FRP) via StatusBar. The Samsung ID is SVE-2020-17888 (December 2020).

Affected Software

5 affected components

Google Android=8.0

Google Android=8.1

Google Android=9.0

Google Android=10.0

Google Android=11.0

Event History

Dec 18, 2020

CVE Published

via MITRE·08:45 AM

Data Sourced

via MITRE·08:45 AM

Description

Frequently Asked Questions

What is the severity of CVE-2020-35550?

CVE-2020-35550 is considered a significant vulnerability as it allows attackers to bypass Factory Reset Protection on affected Samsung mobile devices.

How do I fix CVE-2020-35550?

To fix CVE-2020-35550, users should update their Samsung mobile devices to the latest security patch that addresses the vulnerability.

What devices are affected by CVE-2020-35550?

CVE-2020-35550 affects Samsung mobile devices running Android versions 8.0, 8.1, 9.0, 10.0, and 11.0.

Can CVE-2020-35550 be exploited remotely?

Yes, CVE-2020-35550 can potentially be exploited remotely by attackers through the StatusBar feature.

Is there a workaround for CVE-2020-35550?

There is no official workaround for CVE-2020-35550, and the best mitigation is to apply the provided security updates.