Skip to content
OpenAdvisories
Medium · 4.4 CVE-2024-20821 EUVD-2024-18536GHSA-wvp9-fc5q-j3q4

A vulnerability possible to reconfigure OTP allows local attackers to transit RMA(Return Merchandise Authorization) mode, which disables se…

Published May 7, 2024 · Updated Aug 1, 2024 · Assigned by SamsungMobile

Description

A vulnerability possible to reconfigure OTP allows local attackers to transit RMA(Return Merchandise Authorization) mode, which disables security features. This attack needs additional privilege to control TEE.

Affected products

VendorProductAffectedFixed
Samsung Mobile Samsung Mobile Devices — Galaxy S24

References