'Find My Mobile' Vulnerabilities Exposed Samsung Galaxy Phones to Attacks

guest · Aug 10, 2020

'Find My Mobile' Vulnerabilities Exposed Samsung Galaxy Phones to Attacks
August 10, 2020
https://www.securityweek.com/find-my-mobile-vulnerabilities-exposed-samsung-galaxy-phones-attacks

Find My Mobile is designed to help users find lost Samsung phones. It can also be used to remotely lock a device, block access to Samsung Pay, and completely wipe the phone if it “falls into the wrong hands.”

According to Char49, there were a total of four vulnerabilities in Find My Mobile components and they could have been exploited by a malicious app installed on the targeted device.
Pedro Umbelino, the Char49 researcher who found the flaws, told SecurityWeek that the malicious app would only require access to the device’s SD card in order to exploit the first vulnerability in the chain and create a file that allows the attacker to intercept communications with backend servers.
Click to expand...

Successful exploitation of the vulnerabilities would have allowed a malicious app to perform any action that the Find My Mobile app could perform, including force a factory reset, wipe data [...]

“This flaw, after setup, can be easily exploited and with severe implications for the user and with a potentially catastrophic impact [...]” the company explained in a technical report describing each of the vulnerabilities.
Click to expand...

Log in or Sign up

'Find My Mobile' Vulnerabilities Exposed Samsung Galaxy Phones to Attacks

guest Guest

Log in or Sign up

'Find My Mobile' Vulnerabilities Exposed Samsung Galaxy Phones to Attacks

guest Guest

Useful Searches