SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2019-20554

Attackers can bypass Factory Reset Protection (FRP) via an external keyboard.

MEDIUM 6.2EPSS 0.13%

Does this matter?

Lower severity and a low EPSS score (0.13%). Track it; it rarely justifies an emergency change on its own.

Description

An issue was discovered on Samsung mobile devices with O(8.x) software. Attackers can bypass Factory Reset Protection (FRP) via an external keyboard. The Samsung ID is SVE-2019-15164 (October 2019).

CVSS 3.1
6.2 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS
0.13% probability · 3th percentile
CISA KEV
Not listed
Affected
google/android
Source
cve@mitre.org

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.