SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2019-20569

Attackers can bypass Factory Reset Protection (FRP) via the status bar.

MEDIUM 6.2EPSS 0.13%

Does this matter?

Lower severity and a low EPSS score (0.13%). Track it; it rarely justifies an emergency change on its own.

Description

An issue was discovered on Samsung mobile devices with P(9.0) software. Attackers can bypass Factory Reset Protection (FRP) via the status bar. The Samsung ID is SVE-2019-15089 (September 2019).

CVSS 3.1
6.2 MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
EPSS
0.13% probability · 3th percentile
CISA KEV
Not listed
Affected
google/android
Source
cve@mitre.org

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.